Fix missing privacy/security rel-params for target=blank url

staabm · staabm · commit 19ff68ce1170 · 2023-09-23T13:47:36.000+02:00
diff --git a/pages/url.list.php b/pages/url.list.php
@@ -96,7 +96,7 @@
     if (60 < mb_strlen($value)) {
         $value = mb_substr($value, 0, 25) . ' ... ' . mb_substr($value, -25);
     }
-    $value = '<span class="nowrap"><a href="' . rex_escape($params['value']) . '" title="' . rex_escape($params['value']) . '" target="_blank">' . $value . '</a></span>';
+    $value = '<span class="nowrap"><a href="' . rex_escape($params['value']) . '" title="' . rex_escape($params['value']) . '" target="_blank" rel="noreferrer noopener">' . $value . '</a></span>';
 
     $categories = (string) $list->getValue('categories');
     $categories = '<br /><span>' . implode(' ', array_map(static fn ($item) => '<span class="label label-default">' . $item . '</span>', explode(',', $categories))) . '</span>';

Original file line number	Diff line number	Diff line change
`@@ -96,7 +96,7 @@`
`96`	`96`	`if (60 < mb_strlen($value)) {`
`97`	`97`	`$value = mb_substr($value, 0, 25) . ' ... ' . mb_substr($value, -25);`
`98`	`98`	`}`
`99`		`- $value = '<span class="nowrap"><a href="' . rex_escape($params['value']) . '" title="' . rex_escape($params['value']) . '" target="_blank">' . $value . '</a></span>';`
	`99`	`+ $value = '<span class="nowrap"><a href="' . rex_escape($params['value']) . '" title="' . rex_escape($params['value']) . '" target="_blank" rel="noreferrer noopener">' . $value . '</a></span>';`
`100`	`100`
`101`	`101`	`$categories = (string) $list->getValue('categories');`
`102`	`102`	`$categories = '<br /><span>' . implode(' ', array_map(static fn ($item) => '<span class="label label-default">' . $item . '</span>', explode(',', $categories))) . '</span>';`