Developer forum

It is a Swift 2 setting. We deleted the feature from code - but forgot to remove the setting.

So now we had to re-introduce it: https://doc.dynamicweb.dev/documentation/fundamentals/dw10release/releasenotes/workiteminfo.html?workitemid=26181

We basically just do it JS:
function secureExternalLinks() {
    document.querySelectorAll('a[href*="://"]').forEach(link => {
        if (!link.hasAttribute('target')) link.target = '_blank';
        const rel = link.getAttribute('rel') || '';
        link.setAttribute('rel', `${rel} noopener noreferrer`.trim());
    });
}