summaryrefslogtreecommitdiffstats
path: root/lib/private/legacy/defaults.php
diff options
context:
space:
mode:
authorMarkus Staab <markus.staab@redaxo.de>2017-10-19 12:16:04 +0200
committerMarkus Staab <markus.staab@redaxo.de>2017-10-19 12:16:04 +0200
commitdb34b59238846e5ec046a456b4f76649321571d1 (patch)
tree3efe5a2c81888f6440c43ba6450998f6434ba7ea /lib/private/legacy/defaults.php
parent8e25df9690a4d953721dcdc8e61038b332774a10 (diff)
downloadnextcloud-server-db34b59238846e5ec046a456b4f76649321571d1.tar.gz
nextcloud-server-db34b59238846e5ec046a456b4f76649321571d1.zip
Prevent XSS in links which open a new browser window
Diffstat (limited to 'lib/private/legacy/defaults.php')
-rw-r--r--lib/private/legacy/defaults.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/private/legacy/defaults.php b/lib/private/legacy/defaults.php
index adfbe71377d..d2f639959cf 100644
--- a/lib/private/legacy/defaults.php
+++ b/lib/private/legacy/defaults.php
@@ -235,7 +235,7 @@ class OC_Defaults {
$footer = $this->theme->getShortFooter();
} else {
$footer = '<a href="'. $this->getBaseUrl() . '" target="_blank"' .
- ' rel="noreferrer">' .$this->getEntity() . '</a>'.
+ ' rel="noreferrer noopener">' .$this->getEntity() . '</a>'.
' – ' . $this->getSlogan();
}