Mirror
/
zulip
mirror of https://github.com/zulip/zulip.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

landing_nav: Add tabnabbing protection to external target="_blank" link. 

This has no impact because zulip.com is not attacker-controlled, but
we should be consistent in protecting external target="_blank" links.

Signed-off-by: Anders Kaseorg <anders@zulip.com>
This commit is contained in:
Anders Kaseorg 2022-09-15 16:36:39 -07:00 committed by Tim Abbott
parent 82f9014970
commit e38f9f038a
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
templates/zerver/landing_nav.html
View File

@ -107,7 +107,7 @@
<a href="/help">Help center</a>
</li>
<li>
<a href="https://zulip.com/development-community/" target="_blank">
<a href="https://zulip.com/development-community/" target="_blank" rel="noopener noreferrer">
Community chat
</a>
</li>
@ -136,7 +136,7 @@
</a>
</li>
<li>
<a href="https://github.com/zulip/zulip" target="_blank" rel="noopener noreferer">GitHub</a>
<a href="https://github.com/zulip/zulip" target="_blank" rel="noopener noreferrer">GitHub</a>
</li>
</div>
</ul>