mirror of
https://github.com/NodeBB/NodeBB.git
synced 2025-10-26 08:36:12 +01:00
fix: reverse tabnabbing exploit in post images
This commit is contained in:
@@ -25,7 +25,7 @@ define('forum/topic/images', [], function () {
|
||||
if (!$this.parent().is('a')) {
|
||||
$this.wrap('<a href="' + src + '" ' +
|
||||
(!srcExt && altExt ? ' download="' + altFilename + '" ' : '') +
|
||||
' target="_blank" >');
|
||||
' target="_blank" rel="noopener">');
|
||||
}
|
||||
});
|
||||
};
|
||||
|
||||
Reference in New Issue
Block a user