Open Link in New Window Code

target="_blank" opens a link in a new tab instead of navigating away from the current page. On its own that used to be a real security hole: the new page gets a JavaScript reference to the tab it came from, through window.opener, and can use it to silently swap the original page for a phishing look-alike — a technique called tabnabbing.

This generator always adds rel="noopener noreferrer" alongside target="_blank", which severs that reference. Modern Chrome and Firefox apply noopener to _blank links by default, but Safari and older browsers do not, so writing it explicitly is still the safe habit rather than relying on a browser default.

noopener vs noreferrer

noopener blocks the window.opener reference — that is the part that stops tabnabbing. noreferrer does something separate: it stops the browser sending a Referer header to the new page, so the destination site cannot see which page linked to it.

Including both, as this generator does, covers both cases and works across every browser in current use.

When a new tab is the right call

Opening a link in a new tab takes a decision away from the reader, who could already middle-click or Ctrl-click to do it themselves if they wanted to. Use it sparingly — mainly for links that would cost the visitor real work to lose, such as sending them away from a half-filled form, or for links to a genuinely separate destination like a downloadable document or an external reference a reader will want to keep the current page open alongside.