Alexandre Alapetite 8a776f1461 Prevent a target _blank attacks with window.opener ...

https://mathiasbynens.github.io/rel-noopener/
noopener is implied by noreferrer
https://html.spec.whatwg.org/multipage/semantics.html#link-type-noreferrer
The API for window.open() does not seem stable yet
https://bugzilla.mozilla.org/show_bug.cgi?id=1267339

2016-09-07 14:35:51 +02:00

..

archiving.phtml

CSRF token, update HTTP Referrer policy to same-origin

2016-08-13 17:49:31 +02:00

display.phtml

CSRF token, update HTTP Referrer policy to same-origin

2016-08-13 17:49:31 +02:00

queries.phtml

CSRF token, update HTTP Referrer policy to same-origin

2016-08-13 17:49:31 +02:00

reading.phtml

CSRF token, update HTTP Referrer policy to same-origin

2016-08-13 17:49:31 +02:00

sharing.phtml

Prevent a target _blank attacks with window.opener

2016-09-07 14:35:51 +02:00

shortcut.phtml

CSRF token, update HTTP Referrer policy to same-origin

2016-08-13 17:49:31 +02:00

system.phtml

CSRF token, update HTTP Referrer policy to same-origin

2016-08-13 17:49:31 +02:00