TF-2047 Add rel="noreferrer" to HTML link attribute for enhance website security
(cherry picked from commit b015274879585eb36dd8e29b4781b7a9ac638888)
This commit is contained in:
+4
@@ -14,6 +14,10 @@ class AddTargetBlankInTagATransformer extends DomTransformer {
|
||||
final elements = document.querySelectorAll('a');
|
||||
await Future.wait(elements.map((element) async {
|
||||
element.attributes['target'] = '_blank';
|
||||
final rel = element.attributes['rel'];
|
||||
if (rel == null || (!rel.contains('noopener') && !rel.contains('noreferrer'))) {
|
||||
element.attributes['rel'] = 'noreferrer';
|
||||
}
|
||||
}));
|
||||
}
|
||||
}
|
||||
|
||||
@@ -56,7 +56,7 @@ class SanitizeAutolinkFilter {
|
||||
}
|
||||
|
||||
String _buildUrlLinkTag({required String urlLink, required String value}) {
|
||||
return '<a href="$urlLink" target="_blank">$value</a>';
|
||||
return '<a href="$urlLink" target="_blank" rel="noreferrer">$value</a>';
|
||||
}
|
||||
|
||||
String _buildEmailLinkTag({required String mailToLink, required String value}) {
|
||||
|
||||
Reference in New Issue
Block a user