[FLINK-35532][Runtime/Web Frontend] Prevent Cross-Site Authentication…

… (XSA) attacks on Flink dashboard
hlteoh37 · Jun 5, 2024 · d584cf3 · d584cf3
1 parent b8d5271
commit d584cf3
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 2 deletions.
diff --git a/...-web/web-dashboard/src/app/pages/job-manager/profiler/job-manager-profiler.component.html b/...-web/web-dashboard/src/app/pages/job-manager/profiler/job-manager-profiler.component.html
@@ -107,7 +107,11 @@
           <ng-template #titleTemplate>
             <span>
               Please refer to
-              <a href="https://github.com/async-profiler/async-profiler/wiki">
+              <a
+                href="https://github.com/async-profiler/async-profiler/wiki"
+                target="_blank"
+                rel="noopener noreferrer"
+              >
                 async-profiler's wiki
               </a>
               for more detailed info of this feature.

diff --git a/...eb/web-dashboard/src/app/pages/task-manager/profiler/task-manager-profiler.component.html b/...eb/web-dashboard/src/app/pages/task-manager/profiler/task-manager-profiler.component.html
@@ -107,7 +107,11 @@
           <ng-template #titleTemplate>
             <span>
               Please refer to
-              <a href="https://github.com/async-profiler/async-profiler/wiki">
+              <a
+                href="https://github.com/async-profiler/async-profiler/wiki"
+                target="_blank"
+                rel="noopener noreferrer"
+              >
                 async-profiler's wiki
               </a>
               for more detailed info of this feature.