From 85d793ce884a9c67c22a83efcb8330b3fb31f3fd Mon Sep 17 00:00:00 2001
From: W-Mark Kubacki <wmark@hurrikane.de>
Date: Sat, 7 May 2016 20:06:55 +0200
Subject: [PATCH] browse: Decorate external links with: noopener noreferrer

Setting these on external links prefents the target from manipulating this
page by "window.opener" with some widely deployed browsers.
---
 caddy/setup/browse.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/caddy/setup/browse.go b/caddy/setup/browse.go
index d26e60ec..fdb66722 100644
--- a/caddy/setup/browse.go
+++ b/caddy/setup/browse.go
@@ -393,7 +393,7 @@ footer {
 			</div>
 		</main>
 		<footer>
-			Served with <a href="https://caddyserver.com">Caddy</a>
+			Served with <a rel="noopener noreferrer" href="https://caddyserver.com">Caddy</a>.
 		</footer>
 		<script type="text/javascript">
 			function localizeDatetime(e, index, ar) {