If you have links to another origin, you should use rel="noopener", especially if they open in a new tab/window. <a href="http://example.com" target="_blank" rel="noopener"> Example site </a> Without this, the new page can access your window object via window.opener. Thankfully the origin security model of the web prevents it reading your page, but no-thankfully some legacy APIs mean it can naviga
![The performance benefits of rel=noopener - JakeArchibald.com](https://cdn-ak-scissors.b.st-hatena.com/image/square/275edb50d473e8e4acd3a8035eef743809f96ee2/height=288;version=1;width=512/https%3A%2F%2Fjakearchibald.com%2Fc%2Ficon-d166b7f8.png)