diff options
| author | Markus Staab <markus.staab@redaxo.de> | 2017-10-19 12:16:04 +0200 |
|---|---|---|
| committer | Markus Staab <markus.staab@redaxo.de> | 2017-10-19 12:16:04 +0200 |
| commit | db34b59238846e5ec046a456b4f76649321571d1 (patch) | |
| tree | 3efe5a2c81888f6440c43ba6450998f6434ba7ea /core/templates/update.use-cli.php | |
| parent | 8e25df9690a4d953721dcdc8e61038b332774a10 (diff) | |
| download | nextcloud-server-db34b59238846e5ec046a456b4f76649321571d1.tar.gz nextcloud-server-db34b59238846e5ec046a456b4f76649321571d1.zip | |
Prevent XSS in links which open a new browser window
Diffstat (limited to 'core/templates/update.use-cli.php')
| -rw-r--r-- | core/templates/update.use-cli.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/core/templates/update.use-cli.php b/core/templates/update.use-cli.php index d30e15c8573..06d7e284907 100644 --- a/core/templates/update.use-cli.php +++ b/core/templates/update.use-cli.php @@ -8,7 +8,7 @@ p($l->t('Please use the command line updater because automatic updating is disabled in the config.php.')); } ?><br><br> <?php - print_unescaped($l->t('For help, see the <a target="_blank" rel="noreferrer" href="%s">documentation</a>.', [link_to_docs('admin-cli-upgrade')])); ?><br><br> + print_unescaped($l->t('For help, see the <a target="_blank" rel="noreferrer noopener" href="%s">documentation</a>.', [link_to_docs('admin-cli-upgrade')])); ?><br><br> </div> </div> |