Merge pull request #4243 from EdOverflow/reverse-tabnabbing

Add rel="noopener noreferrer" to target="_blank".
gratipay · Dec 19, 2016 · f7c0292 · f7c0292
2 parents 5f3b592 + 590a16e
commit f7c0292
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/templates/profile-edit.html b/templates/profile-edit.html
@@ -21,8 +21,8 @@ <h2>{{ _("Statement") }}
         <textarea name="content" rows="15" placeholder="{{ stmt_placeholder }}"
                   data-confirm-discard="{{ confirm_discard }}"></textarea>
         <p class="help">{{ _("Markdown supported.") }}
-            <a href="https://daringfireball.net/projects/markdown/basics" target="_blank">{{ _("What is markdown?") }}</a>
-            (<a href="https://github.com/gratipay/gratipay.com/tree/master/gratipay/utils/markdown.py" target="_blank">{{ _("View source.") }}</a>)
+            <a href="https://daringfireball.net/projects/markdown/basics" target="_blank" rel="noopener noreferrer">{{ _("What is markdown?") }}</a>
+            (<a href="https://github.com/gratipay/gratipay.com/tree/master/gratipay/utils/markdown.py" target="_blank" rel="noopener noreferrer">{{ _("View source.") }}</a>)
         </p>
         <button class="save">{{ _("Save") }}</button>
         <button class="cancel">{{ _("Cancel") }}</button>