You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently, if you use EuiLink to create a link, it implements a security control that uses the href property to calculate the appropriate rel attribute (added in #337). This is needed to ensure that potentially malicious external websites cannot modify the DOM of the source page.
However, other components that support the href property (such as EuiBadge and EuiListGroupItem) do not set the rel attribute. We should audit all of the EUI components to find what gaps exist, and ideally put a linter rule in place to prevent regressions in the future.
The text was updated successfully, but these errors were encountered:
Currently, if you use
EuiLink
to create a link, it implements a security control that uses thehref
property to calculate the appropriaterel
attribute (added in #337). This is needed to ensure that potentially malicious external websites cannot modify the DOM of the source page.However, other components that support the
href
property (such asEuiBadge
andEuiListGroupItem
) do not set therel
attribute. We should audit all of the EUI components to find what gaps exist, and ideally put a linter rule in place to prevent regressions in the future.The text was updated successfully, but these errors were encountered: