From db34b59238846e5ec046a456b4f76649321571d1 Mon Sep 17 00:00:00 2001
From: Markus Staab <markus.staab@redaxo.de>
Date: Thu, 19 Oct 2017 12:16:04 +0200
Subject: Prevent XSS in links which open a new browser window

---
 apps/workflowengine/templates/admin.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'apps/workflowengine')

diff --git a/apps/workflowengine/templates/admin.php b/apps/workflowengine/templates/admin.php
index 4f4dab4043f..e9873f8f289 100644
--- a/apps/workflowengine/templates/admin.php
+++ b/apps/workflowengine/templates/admin.php
@@ -25,7 +25,7 @@
 <div id="<?php p($_['appid']); ?>" class="section workflowengine">
 	<h2 class="inlineblock"><?php p($_['heading']); ?></h2>
 	<?php if (!empty($_['docs'])): ?>
-		<a target="_blank" rel="noreferrer" class="icon-info svg"
+		<a target="_blank" rel="noreferrer noopener" class="icon-info svg"
 		   title="<?php p($l->t('Open documentation'));?>"
 		   href="<?php p(link_to_docs($_['docs'])); ?>">
 		</a>
-- 
cgit v1.2.3