How to create links which open in new tabs without security vulnerabilities

Most people know using _target="blank" on an <a> will result in the browser opening the url in a new tab when a user clicks on the link.

However, doing this alone leaves the user exposed to phishing attacks.

The secure way to do this is to also specify rel="noopener noreferrer" i.e.

<a target="_blank" rel="noopener noreferrer" href="http://example.com/thing.html">Check this out</a>