# Optionally add noreferrer to external links

**URL:** <https://meta.discourse.org/t/optionally-add-noreferrer-to-external-links/79474>\
**Category:** Product Support\
**Created:** [January 31, 2018, 5:34pm UTC](https://meta.discourse.org/t/optionally-add-noreferrer-to-external-links/79474 "2018-01-31T17:34:41Z")\
**Posts on this page:** 1\
**Showing post:** 12

<div class="post-metadata">

**Author:** ![frictionel](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/frictionel/32/299701_2.png) [@frictionel](https://meta.discourse.org/u/frictionel)\
**Post date:** [March 26, 2018, 8:19pm UTC](https://meta.discourse.org/t/optionally-add-noreferrer-to-external-links/79474/12 "2018-03-26T20:19:55Z")

</div>

This seems to be a no-brainer: Why not trust a link that someone posted who is trusted by Discourse? But I was thinking about it a little more and this is the wrong question.

How can you or @codinghorror or anyone be certain that the external site isn’t compromised? And if not now can’t it be malicious at some point in the future?

So it’s not about trusting the user who posted the link but rather trusting the target site.

Tell me that i’m wrong.

---

_[View the full topic](https://meta.discourse.org/t/optionally-add-noreferrer-to-external-links/79474)._
