Improvement for issue zammad#952 - External links in html emails will…

… be open in local context.
MarkusHarmsen · Apr 17, 2017 · 449d190 · 449d190
1 parent 4b332b4
commit 449d190
Show file tree

Hide file tree

Showing 6 changed files with 122 additions and 122 deletions.
diff --git a/lib/html_sanitizer.rb b/lib/html_sanitizer.rb
@@ -138,7 +138,7 @@ def self.strict(string, external = false)
         end
         next if !href.downcase.start_with?('http', 'ftp', '//')
         node.set_attribute('href', href)
-        node.set_attribute('rel', 'nofollow')
+        node.set_attribute('rel', 'nofollow noreferrer noopener')
         node.set_attribute('target', '_blank')
       end
 
@@ -338,7 +338,7 @@ def self.add_link(content, urls, node)
 
       a = Nokogiri::XML::Node.new 'a', node.document
       a['href'] = url
-      a['rel'] = 'nofollow'
+      a['rel'] = 'nofollow noreferrer noopener'
       a['target'] = '_blank'
       a.content = url