jsx-no-target-blank

Require rel='noopener noreferrer' with target='_blank'. This rule is part of eslint-plugin-react-features and provides LLM-optimized error messages.

Type-unaware

Keywords: React, JSX, target blank, noopener, security, ESLint rule, LLM-optimized

Require rel="noopener noreferrer" with target="_blank". This rule is part of eslint-plugin-react-features and provides LLM-optimized error messages.

Quick Summary

Aspect	Details
Severity	Warning (security)
Auto-Fix	💡 Suggests fixes
Category	React Security
ESLint MCP	✅ Optimized for ESLint MCP integration
Best For	All React/JSX projects

Rule Details

Links with target="_blank" without rel="noopener noreferrer" are vulnerable to tabnabbing attacks.

Examples

❌ Incorrect

<a target="_blank" href="https://example.com">Link</a>

<a target="_blank" href={url}>External</a>

✅ Correct

<a target="_blank" rel="noopener noreferrer" href="https://example.com">Link</a>

<a target="_blank" rel="noopener" href="https://example.com">Link</a>

jsx-no-script-url - Prevent javascript URLs