Penpot/penpot
0
Fork 0
mirror of https://github.com/penpot/penpot.git synced 2025-01-23 23:18:48 -05:00
Code Issues Activity

✨ Protect external links

Browse source
This commit is contained in:
Andrés Moya 2021-09-29 11:41:29 +02:00
parent 9e5166d991
commit fe4cab3a9e
1 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
frontend/src/app/util/dom.cljs
View file

@ -399,7 +399,9 @@
([uri]
(open-new-window uri "_blank"))
([uri name]
(js/window.open (str uri) name)))
;; Warning: need to protect against reverse tabnabbing attack
;; https://www.comparitech.com/blog/information-security/reverse-tabnabbing/
(.open js/window (str uri) name "noopener,noreferrer")))
(defn browser-back
[]