Bug 1329511 - Any link to user-entered URL with target="_blank" should have rel=...

diff --git a/extensions/BugModal/template/en/default/bug_modal/activity_stream.html.tmpl b/extensions/BugModal/template/en/default/bug_modal/activity_stream.html.tmpl
index 4f9dd60b5f4e106f1cf5c9daa38fb0d3bf80169c..f5074dbfa5b93de3388816ef313973d6c4b69e99 100644 (file)
--- a/extensions/BugModal/template/en/default/bug_modal/activity_stream.html.tmpl
+++ b/extensions/BugModal/template/en/default/bug_modal/activity_stream.html.tmpl
@@ -332,7 +332,7 @@
             "$terms.bug $see_also.bug_id" FILTER bug_link(see_also.bug_id);
           ELSE;
             %]
-            <a href="[% see_also.url FILTER html %]" target="_blank">[% see_also.url FILTER html %]</a>
+            <a href="[% see_also.url FILTER html %]" target="_blank" rel="noreferrer">[% see_also.url FILTER html %]</a>
             [%
           END;
           ", " UNLESS loop.last;

diff --git a/extensions/InlineHistory/template/en/default/hook/bug/comments-aftercomments.html.tmpl b/extensions/InlineHistory/template/en/default/hook/bug/comments-aftercomments.html.tmpl
index fb5d25225bd46516535d4f980582fd0d5e8ea931..c224a4e45fdc9afb739d35bb491fc885dd233af8 100644 (file)
--- a/extensions/InlineHistory/template/en/default/hook/bug/comments-aftercomments.html.tmpl
+++ b/extensions/InlineHistory/template/en/default/hook/bug/comments-aftercomments.html.tmpl
@@ -146,7 +146,7 @@
       [% IF see_also.bug_id %]
         [%~%][% "$terms.bug $see_also.bug_id" FILTER bug_link(see_also.bug_id) FILTER js %]
       [% ELSE %]
-        [%~%]<a href="[% see_also.url FILTER html FILTER js %]" target="_blank">
+        [%~%]<a href="[% see_also.url FILTER html FILTER js %]" target="_blank" rel="noreferrer">
         [%~%][% see_also.url FILTER html FILTER js %]</a>
       [% END %]
       [%- ", " IF NOT loop.last %]