A new-tab link that hands over the page it left
===============================================

Rule · bucket: mechanical · severity: error · detector: interface-safety · since: v0.14.0
Section: Things to avoid
Group: Safety at the interface

Forbidden:
  `target="_blank"` with no `rel`

Instead:
  `rel="noopener"` on every `target="_blank"`, `noreferrer` too when the destination has no business knowing where the reader came from.

The opened page gets a handle on the window that opened it and can navigate it somewhere else. The reader comes back to a tab that looks like yours and is not. Modern browsers imply `noopener` for `_blank`, which is the argument for writing it rather than against: the ones that do not are the ones being attacked.