No Opener, No Phishers

Reduce the risk of falling victim to phishing attacks.

No Opener, No Phishers - Secure Chrome Extension Against Phishing

No Opener, No Phishers is a user-friendly Chrome extension enabling secure browsing. It adds 'noopener noreferrer' to the rel attribute on all links from the websites you visit. This prevents phishing attacks exploiting the target='_blank' vulnerability that exists in several websites with user generated content, thereby enhancing your browser's security. Explore the open-source extension on Github.

Download

Extension stats

By: Jamie Farrelly

Users: 575

-21

Rating: 4.78

(9)

Version: 2 (Last updated: 2019-06-17)

Creation date: 2019-06-17

Risk impact: Low risk impact

Risk likelihood:

Low risk likelihood

Manifest version: 2

Size: 280.58K

Ranking

# 38,959 ▼ 363

Other rankings

#7626 in Developer Tools ▼ 33 #117 in example keyword 2 ▼ 3

Other platforms

URL Opener & Manager (v5.0)

3.11

(121) 6,082+

Not available on Firefox

Not available on Edge

Want to check extension ranking and stats more quickly for other Chrome extensions? Install Chrome-Stats extension to view Chrome-Stats data as you browse the Chrome Web Store.

Extension summary

Analyze keywords

Any website that uses target="_blank" on their links, allows user generated content and doesn't use the rel="noopener" attribute on their links (I'm looking at you Facebook, Twitter etc.) is vulnerable to a scarily simple phishing attack.

For an example of this kind of attack, view this example that I've made: https://jamiefarrelly.github.io/Rel-NoOpener-Example/

This Chrome extension is as simple as it gets, all it does is add "noopener noreferrer" to the rel attribute on all links on the pages that you're visiting so that you won't fall victim to this type of phishing attack.

Open source on Github https://github.com/JamieFarrelly/No-Opener-No-Phishers

User reviews

It would have been nicer if the extension allowed making exceptions for some sites via a whitelist.

Gaurav, 2022-09-11

PSA: This is no longer required if you're on version 88 or newer on any platform that uses Chromium (e.g. Chrome, New Edge, Brave, etc.). https://www.chromestatus.com/feature/6140064063029248

Justin Butler, 2021-06-29

This feature is now baked into Chrome so the extension can be removed for most purposes. Where a site links to a target other than "_blank", e.g. "_potato" the same security issue still exists. Not sure if this extension only works with _blank links