#4.78 / 9 rate

No Opener, No Phishers

641 users

2019-06-17

Jamie Farrelly

This extension is being deprecated because it doesn't follow Chrome extension best practices.

Extension Information

5 star

88%

4 star

3 star

12%

2 star

1 star

Supported Languages

Description

Reduce the risk of falling victim to phishing attacks.

Any website that uses target="_blank" on their links, allows user generated content and doesn't use the rel="noopener" attribute on their links (I'm looking at you Facebook, Twitter etc.) is vulnerable to a scarily simple phishing attack.

For an example of this kind of attack, view this example that I've made: https://jamiefarrelly.github.io/Rel-NoOpener-Example/

This Chrome extension is as simple as it gets, all it does is add "noopener noreferrer" to the rel attribute on all links on the pages that you're visiting so that you won't fall victim to this type of phishing attack.

Open source on Github https://github.com/JamieFarrelly/No-Opener-No-Phishers

Reviews

Gaurav

It would have been nicer if the extension allowed making exceptions for some sites via a whitelist.

Justin Butler

PSA: This is no longer required if you're on version 88 or newer on any platform that uses Chromium (e.g. Chrome, New Edge, Brave, etc.). https://www.chromestatus.com/feature/6140064063029248

Sam Prince

This feature is now baked into Chrome so the extension can be removed for most purposes. Where a site links to a target other than "_blank", e.g. "_potato" the same security issue still exists. Not sure if this extension only works with _blank links