target=_blank rel=opener Security Check

Resolves opener behavior requested by an anchor with target=_blank under modern HTML rules. Implicit noopener applies unless opener is present; noreferrer or noopener takes precedence.

Description

Modern anchors targeting a new context implicitly suppress opener access unless explicitly requested.

Modern anchors targeting a new context implicitly suppress opener access unless explicitly requested. The rel tokens noopener and noreferrer override an opener request.1

The tool returns blankTarget, openerRequested, referrerSuppressed. The fields describe the supplied local pattern or effective state, or contain the formatted markup shown below.

When to use target=_blank rel=opener Security Check

Use this for the following task: Resolves opener behavior requested by an anchor with target=_blank under modern HTML rules. Implicit noopener applies unless opener is present; noreferrer or noopener takes precedence. Provide the requested local fields extracted from the relevant element or attribute.

How to use target=_blank rel=opener Security Check and understand its results

  1. Prepare the parsed element names, attribute values or direct element-child lists requested below. Keep attribute presence separate from its value.
  2. Enter target, rel according to the field table, then run the tool.
  3. Read blankTarget, openerRequested, referrerSuppressed. Check the effective state, recognized-token flags or generated markup against the rules below.
  4. Correct any reported local mismatch and check the resulting markup in its intended document and browser context.
Input fieldMeaningValue type and boundsRequirement
targetTargetstring; maximum text length 100000Required
relRelstring; maximum text length 100000Required

Supply parsed target and rel values. Match _blank without trimming, split rel on HTML ASCII whitespace and report blankTarget, openerRequested and referrerSuppressed.

openerRequested = target is _blank AND rel includes opener AND excludes noopener/noreferrer

The symbols and boundary conditions refer to the supplied fields and the implementation described above.

Output fieldMeaningValue type
blankTargetBlank Targetboolean
openerRequestedOpener Requestedboolean
referrerSuppressedReferrer Suppressedboolean
json
{
  "input": {
    "target": "_blank",
    "rel": "opener"
  },
  "output": {
    "blankTarget": true,
    "openerRequested": true,
    "referrerSuppressed": false
  }
}

Limitations and assumptions

This resolves the requested behavior from these attributes only. It does not open a context, inspect browser state or combine response-header isolation policies.

The tool does not fetch a page, run a browser or validate an entire HTML document. Malformed tool requests produce input errors; valid requests can still report unrecognized values or failed local checks.

Alternative or Complementary methods

Choose Anchor target Values Lookup when you need its operation: Classifies standard HTML navigable target keywords or valid named targets. Empty values default to the current context. Browser-specific target extensions are excluded. Choose referrerpolicy Values Table for the complementary operation: Resolves a referrerpolicy attribute to its standard keyword or the empty inherited-policy state. It does not compute referrer URLs or combine document headers and noreferrer.

Background reference: HTML Standard: target=_blank rel=opener Security Check.

References

  1. HTML Standard: target=_blank rel=opener Security Check — WHATWG

Similar or alternative tools

  • Anchor target Values Lookup

    Classifies standard HTML navigable target keywords or valid named targets. Empty values default to the current context. Browser-specific target extensions are excluded.

  • referrerpolicy Values Table

    Resolves a referrerpolicy attribute to its standard keyword or the empty inherited-policy state. It does not compute referrer URLs or combine document headers and noreferrer.

Don't forget to set a bookmark for tool.io!
Privacy | Imprint | Cookies