adding noopener and noreferrer to links in widgets

public/src/utils.js

@@ -545,6 +545,20 @@
 			return str.toString().replace(escapeChars, replaceChar);
 		},
 
+		addNoReferrer: function (containerEl) {
+			containerEl.find('a').attr('rel', function (idx, value) {
+				value = value ? value.split(' ') : [];
+
+				['noopener', 'noreferrer'].forEach(function (property) {
+					if (!value.includes(property)) {
+						value.push(property);
+					}
+				});
+
+				return value.join(' ');
+			});
+		},
+
 		isAndroidBrowser: function () {
 			// http://stackoverflow.com/questions/9286355/how-to-detect-only-the-native-android-browser
 			var nua = navigator.userAgent;

public/src/widgets.js

@@ -59,6 +59,7 @@
 				title: $(this).attr('title'),
 			});
 		});
+		utils.addNoReferrer(widgetAreas);
 		$(window).trigger('action:widgets.loaded', {});
 		callback();
 	};