Merge branch 'master' into pr/8014

package-lock.json

@@ -46,7 +46,7 @@
         "source-map-support": "^0.5.21",
         "sourcemap-codec": "^1.4.8",
         "tiny-glob": "^0.2.9",
-        "tslib": "^2.4.0",
+        "tslib": "^2.4.1",
         "typescript": "^3.7.5",
         "util": "^0.12.5"
       },
@@ -4840,9 +4840,9 @@
       }
     },
     "node_modules/tslib": {
-      "version": "2.4.0",
+      "version": "2.4.1",
-      "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.4.0.tgz",
+      "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.4.1.tgz",
-      "integrity": "sha512-d6xOpEDfsi2CZVlPQzGeux8XMwLT9hssAsaPYExaQMuYskwb+x1x7J371tWlbBdWHroy99KnVB6qIkUbs5X3UQ==",
+      "integrity": "sha512-tGyy4dAjRIEwI7BzsB0lynWgOpfqjUdq91XXAlIWD2OwKBH7oCl/GZG/HT4BOHrTlPMOASlMQ7veyTqpmRcrNA==",
       "dev": true
     },
     "node_modules/tsutils": {
@@ -8977,9 +8977,9 @@
       }
     },
     "tslib": {
-      "version": "2.4.0",
+      "version": "2.4.1",
-      "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.4.0.tgz",
+      "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.4.1.tgz",
-      "integrity": "sha512-d6xOpEDfsi2CZVlPQzGeux8XMwLT9hssAsaPYExaQMuYskwb+x1x7J371tWlbBdWHroy99KnVB6qIkUbs5X3UQ==",
+      "integrity": "sha512-tGyy4dAjRIEwI7BzsB0lynWgOpfqjUdq91XXAlIWD2OwKBH7oCl/GZG/HT4BOHrTlPMOASlMQ7veyTqpmRcrNA==",
       "dev": true
     },
     "tsutils": {

package.json

@@ -153,7 +153,7 @@
     "source-map-support": "^0.5.21",
     "sourcemap-codec": "^1.4.8",
     "tiny-glob": "^0.2.9",
-    "tslib": "^2.4.0",
+    "tslib": "^2.4.1",
     "typescript": "^3.7.5"
   }
 }

src/compiler/compile/nodes/Element.ts

@@ -620,9 +620,9 @@ export default class Element extends Node {
 
 				if (href_static_value === null || href_static_value.match(/^(https?:)?\/\//i)) {
 					const rel = attribute_map.get('rel');
+					if (rel == null || rel.is_static) {
 						const rel_values = rel ? rel.get_static_value().split(' ') : [];
 						const expected_values = ['noreferrer'];
-
 						expected_values.forEach(expected_value => {
 							if (!rel || rel && rel_values.indexOf(expected_value) < 0) {
 								component.warn(this, {
@@ -633,6 +633,7 @@ export default class Element extends Node {
 						});
 					}
 				}
+			}
 
 			if (href_attribute) {
 				const href_value = href_attribute.get_static_value();

test/validator/samples/security-anchor-rel-noreferrer/input.svelte

@@ -29,3 +29,5 @@
 <a href="HTTPS://svelte.dev" target="_blank" rel="noreferrer noopener">svelte website (valid)</a>
 <a href="//svelte.dev" target="_blank" rel="noreferrer">svelte website (valid)</a>
 <a href="//svelte.dev" target="_blank" rel="noreferrer noopener">svelte website (valid)</a>
+<!-- dynamic rel value should not warn-->
+<a href="//svelte.dev" target="_blank" rel={`${Math.random()}`}>svelte website (valid)</a>