diff options
| author | Sheogorath | 2018-10-04 01:41:48 +0200 |
|---|---|---|
| committer | Sheogorath | 2018-10-04 01:49:36 +0200 |
| commit | 75a23fe2c91d6c2f5008daccae72f8964af72307 (patch) | |
| tree | 0a0d58402cb694344033414002ee1f20784efbfc /public/views/codimd/body.ejs | |
| parent | d9ba11b21a77561ec3f72d5396d48fea32f6389d (diff) | |
Add rel="noopener" to target="_blank" links
The noopener construct protects from some nasty clickjacking attacks. We
can apply them savely to all our links since we don't rely on the
previously used page.
Some more details: https://mathiasbynens.github.io/rel-noopener/
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
Diffstat (limited to 'public/views/codimd/body.ejs')
| -rw-r--r-- | public/views/codimd/body.ejs | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/public/views/codimd/body.ejs b/public/views/codimd/body.ejs index d4f27a93..dc111909 100644 --- a/public/views/codimd/body.ejs +++ b/public/views/codimd/body.ejs @@ -113,7 +113,7 @@ </div> <div class="modal-body" style="color:black;"> <h5></h5> - <a target="_blank" style="word-break: break-all;"></a> + <a target="_blank" rel="noopener" style="word-break: break-all;"></a> </div> <div class="modal-footer"> <button type="button" class="btn btn-default" data-dismiss="modal"><%= __('OK') %></button> |