about summary refs log tree commit diff
path: root/app/lib
diff options
context:
space:
mode:
authorBSKY <git@bsky.moe>2019-10-25 05:44:42 +0900
committerEugen Rochko <eugen@zeonfederated.com>2019-10-24 22:44:42 +0200
commitfccf83e1f2ecd4e23f7b1faee5330976d17da7b8 (patch)
tree66d790a9e0089488a9b46fdd5e939c395620b932 /app/lib
parent237293fd8cacb8b6525d54170c864c76d52ae6aa (diff)
Add noopener and/or noreferrer (#12202)
Diffstat (limited to 'app/lib')
-rw-r--r--app/lib/formatter.rb2
-rw-r--r--app/lib/sanitize_config.rb2
2 files changed, 2 insertions, 2 deletions
diff --git a/app/lib/formatter.rb b/app/lib/formatter.rb
index 990b9f63e..6ba327614 100644
--- a/app/lib/formatter.rb
+++ b/app/lib/formatter.rb
@@ -251,7 +251,7 @@ class Formatter
 
   def link_to_url(entity, options = {})
     url        = Addressable::URI.parse(entity[:url])
-    html_attrs = { target: '_blank', rel: 'nofollow noopener' }
+    html_attrs = { target: '_blank', rel: 'nofollow noopener noreferrer' }
 
     html_attrs[:rel] = "me #{html_attrs[:rel]}" if options[:me]
 
diff --git a/app/lib/sanitize_config.rb b/app/lib/sanitize_config.rb
index aba8ce9f6..77045155e 100644
--- a/app/lib/sanitize_config.rb
+++ b/app/lib/sanitize_config.rb
@@ -45,7 +45,7 @@ class Sanitize
 
       add_attributes: {
         'a' => {
-          'rel' => 'nofollow noopener',
+          'rel' => 'nofollow noopener noreferrer',
           'target' => '_blank',
         },
       },