Add rel="noreferrer" to resolve window.opener issue

https://mathiasbynens.github.io/rel-noopener
2016-03-22 20:09:12 +04:30
parent cf87fd8340
commit 29417005b0
2 changed files with 3 additions and 2 deletions
--- a/src/main/java/com/commafeed/backend/feed/FeedUtils.java
+++ b/src/main/java/com/commafeed/backend/feed/FeedUtils.java
@@ -92,6 +92,7 @@ public class FeedUtils {
 		whitelist.addProtocols("q", "cite", "http", "https");

 		whitelist.addEnforcedAttribute("a", "target", "_blank");
+		whitelist.addEnforcedAttribute("a", "rel", "noreferrer");
 		return whitelist;
 	}