davrot/forgejo_backup
1
0
Fork 0
mirror of https://codeberg.org/davrot/forgejo.git synced 2025-05-17 14:00:01 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Add noreferrer to rel='noopener` for <a> tags (#4328)

Browse source
This commit is contained in:
cezar97 2018-07-04 02:52:36 +03:00 • committed by techknowlogick
parent 4b654ad17f
commit 51ba3df5ff
17 changed files with 59 additions and 59 deletions
Download patch file Download diff file Expand all files Collapse all files

2
models/repo.go
View file

@ -781,7 +781,7 @@ var (
// DescriptionHTML does special handles to description and return HTML string.
func (repo *Repository) DescriptionHTML() template.HTML {
sanitize := func(s string) string {
return fmt.Sprintf(`<a href="%[1]s" target="_blank" rel="noopener">%[1]s</a>`, s)
return fmt.Sprintf(`<a href="%[1]s" target="_blank" rel="noopener noreferrer">%[1]s</a>`, s)
}
return template.HTML(descPattern.ReplaceAllStringFunc(markup.Sanitize(repo.Description), sanitize))
}