Anonymous
February 17, 2020 at 5:14 am
Hi
I have just noticed a security issue when running Google audits, and it relates to the Pinterest link created via the Ascend Social Links widget. The resulting URL is target=”_blank” but doers not include rel=”noopener”. The others that I use (Facebook, Insta and Twitter) all include this as expected. This is the relevant source, where you can see that Pinterest doesn’t include it:
<div class="kadence_social_widget clearfix"><a href="*Login to see link class="facebook_link" rel="noopener" target="_blank" data-toggle="tooltip" data-placement="top" data-original-title="Facebook" aria-label="Facebook"><i class="kt-icon-facebook"></i></a><a href="*Login to see link class="twitter_link" rel="noopener" target="_blank" data-toggle="tooltip" data-placement="top" data-original-title="Twitter" aria-label="Twitter"><i class="kt-icon-twitter"></i></a><a href="*Login to see link class="instagram_link" rel="noopener" target="_blank" data-toggle="tooltip" data-placement="top" data-original-title="Instagram" aria-label="Instagram"><i class="kt-icon-instagram"></i></a><a href="*Login to see link class="pinterest_link" target="_blank" data-toggle="tooltip" data-placement="top" data-original-title="Pinterest"><i class="kt-icon-pinterest"></i></a></div>
This appears in my footer: *Login to see link
I don’t believe there is anything I can do as the widget just accepts the URL. Is it possible for you to change this behaviour?
Thanks
Dom