From 9a3c1c71824723d4b369df9b412fd0a7d6f08ac5 Mon Sep 17 00:00:00 2001
From: Bernhard Posselt <dev@bernhard-posselt.com>
Date: Tue, 10 May 2016 17:34:00 +0200
Subject: Fix window.opener vulnerability

---
 templates/part.content.explore.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'templates/part.content.explore.php')

diff --git a/templates/part.content.explore.php b/templates/part.content.explore.php
index 3eab49751..e1871152c 100644
--- a/templates/part.content.explore.php
+++ b/templates/part.content.explore.php
@@ -25,7 +25,7 @@
             <div class="grid-item-content">
                 <h1 ng-show="entry.favicon"
                     ng-style="{ backgroundImage: 'url(' + entry.favicon + ')'}">
-                    <a target="_blank" ng-href="{{ entry.url }}">{{ entry.title }}</a>
+                    <a target="_blank" rel="noreferrer" ng-href="{{ entry.url }}">{{ entry.title }}</a>
                 </h1>
                 <h1 ng-hide="entry.favicon" class="icon-rss">
                     {{ entry.title }}
@@ -48,6 +48,6 @@
     </div>
 
     <div class="explore-footer">
-        <a target="_blank" href="https://github.com/owncloud/news/wiki/Explore-Feed-Section"><?php p($l->t('Got more awesome feeds? Share them with us!')) ?></a>
+        <a target="_blank" rel="noreferrer" href="https://github.com/owncloud/news/wiki/Explore-Feed-Section"><?php p($l->t('Got more awesome feeds? Share them with us!')) ?></a>
     </div>
 </div>
-- 
cgit v1.2.3