← Back to release summary

Support noreferrer attribute for window.open()

Category

Security

Type

New or changed feature

Status

Enabled by default (Chrome 75)

Intent stage

Prepare to ship

• Breaking change: No
• Enterprise impact: None
• Spec maturity: Incubation
• Web Platform Tests: Yes

WPT details: third_party/blink/web_tests/external/wpt/html/browsers/the-window-object includes web platform tests for 'noreferrer'.

Summary

Allows a web page to use window.open() without leaking referrer information by leaving the referrer header out of page navigations.

Standards & signals

• Specification: https://html.spec.whatwg.org/multipage/window-object.html#apis-for-creating-and-navigating-browsing-contexts-by-name
• Firefox: No signal
• Safari: No signal
• Web developers: No signals
• Tracking bug: https://bugs.chromium.org/p/chromium/issues/detail?id=931207

Ecosystem

• Web Platform Tests: https://wpt.fyi/results/?q=support-noreferrer-attribute-for-window-open
• Chrome Platform Showcase: https://chrome-platform-showcase.paulkinlan-ea.deno.net/features
• GenDN reference: https://gendn.paulkinlan-ea.deno.net/features
• chrome.dev demos search: https://www.google.com/search?q=site%3Achrome.dev+Support%20noreferrer%20attribute%20for%20window.open()
• MDN Web Docs: https://developer.mozilla.org/en-US/search?q=Support%20noreferrer%20attribute%20for%20window.open()
• Baseline status: https://webstatus.dev/?q=Support%20noreferrer%20attribute%20for%20window.open()

Explainers: https://github.com/whatwg/html/pull/4331

View on chromestatus.com