From feb4dc383e45a7e2bd7e4eb31f98e295510b7326 Mon Sep 17 00:00:00 2001
From: Thomas Citharel <tcit@tcit.fr>
Date: Thu, 11 Jan 2018 11:02:45 +0100
Subject: Adds rel="noopener noreferrer" to _blank links inside comments

For more details, check out https://mathiasbynens.github.io/rel-noopener/ for instance

Signed-off-by: Thomas Citharel <tcit@tcit.fr>
---
 core/js/public/comments.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'core/js/public')

diff --git a/core/js/public/comments.js b/core/js/public/comments.js
index 955e88c8609..ac0bf8e0ab7 100644
--- a/core/js/public/comments.js
+++ b/core/js/public/comments.js
@@ -43,7 +43,7 @@
 				}
 
 				var linkText = url.replace(self.protocolRegex, '');
-				return '<a class="external" target="_blank" href="' + url + '">' + linkText + '</a>';
+				return '<a class="external" target="_blank" rel="noopener noreferrer" href="' + url + '">' + linkText + '</a>';
 			});
 		},
 
-- 
cgit v1.2.3