]> git.wh0rd.org Git - tt-rss.git/commit
projects / tt-rss.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(merge: 2187322 ba2853c)
Merge branch 'fix-target-blank-vulnerability' into 'master'
authorAndrew Dolgov <cthulhoo@gmail.com>
Sun, 12 Feb 2017 11:19:37 +0000 (14:19 +0300)
committerAndrew Dolgov <cthulhoo@gmail.com>
Sun, 12 Feb 2017 11:19:37 +0000 (14:19 +0300)
commit3891782cf5fc20dc70e17c8665866aef6392233e
tree9e46eabafcddd2e76cd0c8fc4c1498d0b1858757tree | snapshot
parent2187322caee25756d28983f069e291612023c6dccommit | diff
parentba2853caac636d2ae596d74561fa0233567242d4commit | diff
Merge branch 'fix-target-blank-vulnerability' into 'master'

Prevent target='_blank' vulnerability on dynamic link

This merge request refere to https://tt-rss.org/forum/viewtopic.php?f=8&t=4048

It fix the issue I enconter on some feeds I follow.
Just need to add "noopener" and "noreferrer" on "_blank" link to avoid the vulnerability.

See merge request !46
web-based news feed (RSS/Atom) reader and aggregator; see https://tt-rss.org/