eduvia/workavia-mail-front
11
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

TF-2047 Add rel="noreferrer" to HTML link attribute for enhance website security

Browse Source 
(cherry picked from commit b015274879585eb36dd8e29b4781b7a9ac638888)
This commit is contained in:
dab246
2023-08-01 12:57:28 +07:00
committed by Dat Vu
parent 25324f1869
commit 7f194bee69
2 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
core/lib/presentation/utils/html_transformer/dom/add_target_blank_in_tag_a_transformers.dart
+4
View File
@@ -14,6 +14,10 @@ class AddTargetBlankInTagATransformer extends DomTransformer {
final elements = document.querySelectorAll('a'); final elements = document.querySelectorAll('a');
await Future.wait(elements.map((element) async { await Future.wait(elements.map((element) async {
element.attributes['target'] = '_blank'; element.attributes['target'] = '_blank';
final rel = element.attributes['rel'];
if (rel == null || (!rel.contains('noopener') && !rel.contains('noreferrer'))) {
element.attributes['rel'] = 'noreferrer';
}
})); }));
} }
} }
core/lib/presentation/utils/html_transformer/sanitize_autolink_filter.dart
+1 -1
View File
@@ -56,7 +56,7 @@ class SanitizeAutolinkFilter {
} }
String _buildUrlLinkTag({required String urlLink, required String value}) { String _buildUrlLinkTag({required String urlLink, required String value}) {
return '<a href="$urlLink" target="_blank">$value</a>'; return '<a href="$urlLink" target="_blank" rel="noreferrer">$value</a>';
} }
String _buildEmailLinkTag({required String mailToLink, required String value}) { String _buildEmailLinkTag({required String mailToLink, required String value}) {