Title: Security question about the button shortcode
Last modified: November 4, 2018
---
# Security question about the button shortcode
* Resolved [Ironos](https://wordpress.org/support/users/irongenetics96/)
* (@irongenetics96)
* [7 years, 7 months ago](https://wordpress.org/support/topic/security-question-about-the-button-shortcode/)
* Im using your plugin since 2 years mostly for creating buttons.
* In the end of last year wordpress released a security fix with _blank links and
added “noopener” but shortcodes ultimate opens links in button which opens in
a new tab still only with _blank but no noopener is added. This can be a serious
security issue [https://mathiasbynens.github.io/rel-noopener/](https://mathiasbynens.github.io/rel-noopener/)
* Are you going to add “noopener” in a future update or do i have to add this manually
to all buttons?
* Thank you
Viewing 5 replies - 1 through 5 (of 5 total)
* Plugin Author [Vova](https://wordpress.org/support/users/gn_themes/)
* (@gn_themes)
* [7 years, 7 months ago](https://wordpress.org/support/topic/security-question-about-the-button-shortcode/#post-10845946)
* Hi [@irongenetics96](https://wordpress.org/support/users/irongenetics96/),
* I haven’t heard about it. Thanks for the information. I’ll add a fix in the closest
update.
* Thread Starter [Ironos](https://wordpress.org/support/users/irongenetics96/)
* (@irongenetics96)
* [7 years, 7 months ago](https://wordpress.org/support/topic/security-question-about-the-button-shortcode/#post-10846279)
* Lets say you make in normal text editor wordpress a link opened up in a new tab
pointing to wordpress.org ( the link is : wordpress.org/” target=”_blank” rel
=”noopener
* With a button in Shortcodes Ultimate set to nofollow open up in a new tab it
is
* target=”_blank”
* So you add in the next update noopener to existing buttons or only to new added
ones? Because for me it would take hours to change 5000 Buttons by hand.
* Thank you!:)
- This reply was modified 7 years, 7 months ago by [Ironos](https://wordpress.org/support/users/irongenetics96/).
* Plugin Author [Vova](https://wordpress.org/support/users/gn_themes/)
* (@gn_themes)
* [7 years, 7 months ago](https://wordpress.org/support/topic/security-question-about-the-button-shortcode/#post-10846700)
* I’ll add `noopener` as a prefix to the rel attribute value.
* ```
[su_button] =>
[su_button rel="nofollow"] =>
[su_button target="blank"] =>
[su_button target="blank" rel="nofollow"] =>
```
* I know people usually don’t want to edit thousands of pages 🙂
- This reply was modified 7 years, 7 months ago by [Vova](https://wordpress.org/support/users/gn_themes/).
Reason: updated the code
* Plugin Author [Vova](https://wordpress.org/support/users/gn_themes/)
* (@gn_themes)
* [7 years, 7 months ago](https://wordpress.org/support/topic/security-question-about-the-button-shortcode/#post-10849250)
* Quick note. Fix will be added in version `5.1.1`.
* Plugin Author [Vova](https://wordpress.org/support/users/gn_themes/)
* (@gn_themes)
* [7 years, 7 months ago](https://wordpress.org/support/topic/security-question-about-the-button-shortcode/#post-10850863)
* Done.
* Thank you for the feedback.
Viewing 5 replies - 1 through 5 (of 5 total)
The topic ‘Security question about the button shortcode’ is closed to new replies.
* 
* [Shortcodes Ultimate - Content Elements](https://wordpress.org/plugins/shortcodes-ultimate/)
* [Frequently Asked Questions](https://wordpress.org/plugins/shortcodes-ultimate/#faq)
* [Support Threads](https://wordpress.org/support/plugin/shortcodes-ultimate/)
* [Active Topics](https://wordpress.org/support/plugin/shortcodes-ultimate/active/)
* [Unresolved Topics](https://wordpress.org/support/plugin/shortcodes-ultimate/unresolved/)
* [Reviews](https://wordpress.org/support/plugin/shortcodes-ultimate/reviews/)
* 5 replies
* 2 participants
* Last reply from: [Vova](https://wordpress.org/support/users/gn_themes/)
* Last activity: [7 years, 7 months ago](https://wordpress.org/support/topic/security-question-about-the-button-shortcode/#post-10850863)
* Status: resolved