upstream/icingaweb2
1
0
Fork 0
mirror of https://github.com/Icinga/icingaweb2.git synced 2026-06-08 16:12:43 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Add rel="noopener noreferrer" to external links in LoginPage

Browse source 
Prevents the linked page from accessing `window.opener` and stops the
referring URL from being sent in the `Referer` header.
This commit is contained in:
Johannes Rauh 2026-05-11 13:23:42 +02:00
parent 8dff2712a1
commit 059073a5db
1 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
library/Icinga/Web/Widget/LoginPage.php
View file

@ -175,7 +175,8 @@ class LoginPage extends HtmlDocument
'href' => 'https://www.facebook.com/icinga',
'target' => '_blank',
'title' => $this->translate('Icinga on Facebook'),
'aria-label' => $this->translate('Icinga on Facebook')
'aria-label' => $this->translate('Icinga on Facebook'),
'rel' => 'noopener noreferrer'
]),
HtmlElement::create('i', Attributes::create([
'class' => 'icon-facebook-squared',
@ -194,6 +195,7 @@ class LoginPage extends HtmlDocument
'target' => '_blank',
'title' => $this->translate('Icinga on GitHub'),
'aria-label' => $this->translate('Icinga on GitHub'),
'rel' => 'noopener noreferrer'
]),
HtmlElement::create('i', Attributes::create([
'class' => 'icon-github-circled',