Merge pull request #647 from frennkie/patch-2

add no ref to external links to avoid info leak
viper-framework · Feb 6, 2018 · edcefd4 · edcefd4
2 parents 641d1ea + 90e957b
commit edcefd4
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/data/web/header.tpl b/data/web/header.tpl
@@ -64,8 +64,8 @@ end
                 <li class="dropdown">
                     <a href="#" class="dropdown-toggle" data-toggle="dropdown">Help <span class="caret"></span></a>
                     <ul class="dropdown-menu" role="menu">
-                        <li><a href="http://viper-framework.readthedocs.org/en/latest/" target="_blank">Docs</a></li>
-                        <li><a href="https://github.com/viper-framework/viper/issues" target="_blank">Issues</a></li>
+                        <li><a href="http://viper-framework.readthedocs.org/en/latest/" target="_blank" rel="noreferrer noopener">Docs</a></li>
+                        <li><a href="https://github.com/viper-framework/viper/issues" target="_blank" rel="noreferrer noopener">Issues</a></li>
                         <li class="divider"></li>
                         <li><a href="#" data-toggle="modal" data-target="#aboutModal">About</a></li>
                     </ul>