prevent phishing attacks by setting noopener on external links

EderAndre · Aug 26, 2016 · 7ff82e7 · 7ff82e7
1 parent 777a4e8
commit 7ff82e7
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/helios/templates/election_view.html b/helios/templates/election_view.html
@@ -46,7 +46,7 @@ <h3 class="title">{{ election.name }}
 </div>
 
 {% if election.election_info_url %}
-<p style="font-size:1.5em;">[<a target="_blank" href="{{election.election_info_url}}">download candidate bios &amp; statements</a>]</p>
+<p style="font-size:1.5em;">[<a target="_blank" href="{{election.election_info_url}}" rel="noopener noreferrer">download candidate bios &amp; statements</a>]</p>
 {% endif %}
 
 <p align="center" style="font-size: 1.5em;">

diff --git a/heliosbooth/templates/question.html b/heliosbooth/templates/question.html
@@ -30,7 +30,7 @@
 {#if $T.question.answer_urls && $T.question.answer_urls[$T.answer_ordering[$T.answer$index]] && $T.question.answer_urls[$T.answer_ordering[$T.answer$index]] != ""}
 &nbsp;&nbsp;
 <span style="font-size: 12pt;">
-[<a target="_blank" href="{$T.question.answer_urls[$T.answer_ordering[$T.answer$index]]}">more info</a>]
+[<a target="_blank" href="{$T.question.answer_urls[$T.answer_ordering[$T.answer$index]]}" rel="noopener noreferrer">more info</a>]
 </span>
 {#/if}
 </div>