Vulnerability - Components implementing a href attribute to render <a> tags and accepting the target="_blank" option should implement rel="noopener noreferrer"

[emman27]

e.g. If used as

<md-list-item :href="http://virus.com" target="_blank" rel="noopener noreferrer">A malicious link</md-list-item>

then only the li tag encapsulating the actual a tag is given the attribute. This is a security vulnerability as the opened tab can gain access to the current window.