CKeditor add rel attributes to links

[anttila]

Is it possible to get rid of these useless rel attributes? It's CKeditor's default. I don't understand why those are forced.

 

[dragan]

I don't think that's default. Take a look at the settings @ /module/edit?name=ProcessPageEditLink

[anttila]

Yes, I have tried to find some setting from there, but there is no option for those and every site has those attributes if the link is made in the body field.

[Robin S]

16 hours ago, anttila said:

Is it possible to get rid of these useless rel attributes

Those attributes are not useless - their use is that they mitigate against reverse tabnapping vulnerabilities for links that have target="_blank".

https://www.jitbit.com/alexblog/256-targetblank---the-most-underestimated-vulnerability-ever/
https://mathiasbynens.github.io/rel-noopener/