From e38f9f038a5ab43be665670724e27acc78709c01 Mon Sep 17 00:00:00 2001
From: Anders Kaseorg <anders@zulip.com>
Date: Thu, 15 Sep 2022 16:36:39 -0700
Subject: [PATCH] landing_nav: Add tabnabbing protection to external
 target="_blank" link.

This has no impact because zulip.com is not attacker-controlled, but
we should be consistent in protecting external target="_blank" links.

Signed-off-by: Anders Kaseorg <anders@zulip.com>
---
 templates/zerver/landing_nav.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/templates/zerver/landing_nav.html b/templates/zerver/landing_nav.html
index 64f20fd8a9..9c0bb78f76 100644
--- a/templates/zerver/landing_nav.html
+++ b/templates/zerver/landing_nav.html
@@ -107,7 +107,7 @@
                             <a href="/help">Help center</a>
                         </li>
                         <li>
-                            <a href="https://zulip.com/development-community/" target="_blank">
+                            <a href="https://zulip.com/development-community/" target="_blank" rel="noopener noreferrer">
                                 Community chat
                             </a>
                         </li>
@@ -136,7 +136,7 @@
                             </a>
                         </li>
                         <li>
-                            <a href="https://github.com/zulip/zulip" target="_blank" rel="noopener noreferer">GitHub</a>
+                            <a href="https://github.com/zulip/zulip" target="_blank" rel="noopener noreferrer">GitHub</a>
                         </li>
                     </div>
                 </ul>