I've had a request from our web team SEO guy to have the noreferrer attribute removed from our community so he can get accurate referrer data in our corporate site Google Analytics account for links coming from our community.
I understand from reading (I'm far from an expert) that noreferrer is in place to prevent malicious links from taking the control over a newly opened tab. Good thing.
Because it's a security issue, I'm hesitant to have it removed from our community, but I undersand the benefit of seeing links from the community to our company web site. What are your thoughts / suggestions / ideas on the issue?
I *assume* I would have to open a support incident to have it removed as I can't find a setting for it in studio. (??)
Thanks in advance for your input.
Solved! Go to Solution.
Nobody? Here's what I see.
I would really like to get rid of the noreferrer attribute for external links. Anyone?
The noreferer attribute was added to our community to fix the Tab Nabbing vulnerability as you mentioned it is a big security issue.
Secondly, as far as I know, it can be removed for user-generated links and not for system generated links. Turning this off would be a major security concern.
Please find the following link posted by one of our customers.
FYI... I had some trouble with the link you provided, but when I removed some parameters from the end, it worked. Here's the link that works for me: https://community.khoros.com/t5/Li-Product-Ideas/Add-quot-noreferrer-nofollow-quot-to-the-quot-rel-q...