TF-2047 Add rel="noreferrer" to HTML link attribute for enhance website security

(cherry picked from commit b015274879585eb36dd8e29b4781b7a9ac638888)
This commit is contained in:
dab246
2023-08-01 12:57:28 +07:00
committed by Dat Vu
parent 25324f1869
commit 7f194bee69
2 changed files with 5 additions and 1 deletions
@@ -14,6 +14,10 @@ class AddTargetBlankInTagATransformer extends DomTransformer {
final elements = document.querySelectorAll('a');
await Future.wait(elements.map((element) async {
element.attributes['target'] = '_blank';
final rel = element.attributes['rel'];
if (rel == null || (!rel.contains('noopener') && !rel.contains('noreferrer'))) {
element.attributes['rel'] = 'noreferrer';
}
}));
}
}
@@ -56,7 +56,7 @@ class SanitizeAutolinkFilter {
}
String _buildUrlLinkTag({required String urlLink, required String value}) {
return '<a href="$urlLink" target="_blank">$value</a>';
return '<a href="$urlLink" target="_blank" rel="noreferrer">$value</a>';
}
String _buildEmailLinkTag({required String mailToLink, required String value}) {