Alexandre Alapetite 8a776f1461 Prevent a target _blank attacks with window.opener ...

https://mathiasbynens.github.io/rel-noopener/
noopener is implied by noreferrer
https://html.spec.whatwg.org/multipage/semantics.html#link-type-noreferrer
The API for window.open() does not seem stable yet
https://bugzilla.mozilla.org/show_bug.cgi?id=1267339

2016-09-07 14:35:51 +02:00

..

auth

CSRF token, update HTTP Referrer policy to same-origin

2016-08-13 17:49:31 +02:00

configure

Prevent a target _blank attacks with window.opener

2016-09-07 14:35:51 +02:00

entry

Do not mix POST and GET params

2016-08-13 19:10:32 +02:00

error

Fix french i18n for last views

2014-12-11 21:44:25 +01:00

extension

CSRF token, update HTTP Referrer policy to same-origin

2016-08-13 17:49:31 +02:00

feed

Prevent a target _blank attacks with window.opener

2016-09-07 14:35:51 +02:00

helpers

Prevent a target _blank attacks with window.opener

2016-09-07 14:35:51 +02:00

importExport

CSRF token, update HTTP Referrer policy to same-origin

2016-08-13 17:49:31 +02:00

index

Prevent a target _blank attacks with window.opener

2016-09-07 14:35:51 +02:00

javascript

CSP manually refreshing feeds

2016-02-27 17:51:13 +01:00

stats

CSRF token, update HTTP Referrer policy to same-origin

2016-08-13 17:49:31 +02:00

subscription

CSRF token, update HTTP Referrer policy to same-origin

2016-08-13 17:49:31 +02:00

update

Update MySQL to utf8mb4 (full unicode) 🔥

2016-07-30 18:45:34 +02:00

user

CSRF token, update HTTP Referrer policy to same-origin

2016-08-13 17:49:31 +02:00