github/penpot
1
0
Fork 0
mirror of https://github.com/penpot/penpot.git synced 2026-08-01 19:06:18 +00:00
Code Issues Packages Projects Releases Wiki Activity

✨ Protect external links

Browse Source
This commit is contained in:
Andrés Moya 2021-09-29 11:41:29 +02:00
parent 9e5166d991
commit fe4cab3a9e
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
frontend/src/app/util/dom.cljs
View File

@ -399,7 +399,9 @@
([uri] ([uri]
(open-new-window uri "_blank")) (open-new-window uri "_blank"))
([uri name] ([uri name]
(js/window.open (str uri) name))) ;; Warning: need to protect against reverse tabnabbing attack
;; https://www.comparitech.com/blog/information-security/reverse-tabnabbing/
(.open js/window (str uri) name "noopener,noreferrer")))
(defn browser-back (defn browser-back
[] []