3pp-mirror/penpot
1
0
Fork 0
mirror of https://github.com/penpot/penpot.git synced 2025-06-06 07:01:38 +02:00
Code Issues Projects Releases Packages Wiki Activity

✨ Protect external links

Browse source
This commit is contained in:
Andrés Moya 2021-09-29 11:41:29 +02:00
parent 9e5166d991
commit fe4cab3a9e
1 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
frontend/src/app/util/dom.cljs
View file

@ -399,7 +399,9 @@
([uri] ([uri]
(open-new-window uri "_blank")) (open-new-window uri "_blank"))
([uri name] ([uri name]
(js/window.open (str uri) name))) ;; Warning: need to protect against reverse tabnabbing attack
;; https://www.comparitech.com/blog/information-security/reverse-tabnabbing/
(.open js/window (str uri) name "noopener,noreferrer")))
(defn browser-back (defn browser-back
[] []