Improve external link security

search-rug · Feb 13, 2024 · 2025312 · 2025312
1 parent d79f071
commit 2025312
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 8 deletions.
diff --git a/_includes/team-card-compact.html b/_includes/team-card-compact.html
@@ -4,7 +4,7 @@
     </div>
     <div>
         <p class="font-serif text-md text-primary">
-            <a href="{{member.contact.homepage}}" target="blank">{{ member.title }}</a>
+            <a href="{{member.contact.homepage}}" rel="noopener" target="_blank">{{ member.title }}</a>
         </p>
         <p class="text-md text-gray-500">
             {{ member.position }}
@@ -22,14 +22,14 @@
 
         <p class="mt-2 flex space-x-3">
             {% if member.contact.email -%}
-            <a class="hover:opacity-80" href="mailto:{{member.contact.email}}" target="blank">
+            <a class="hover:opacity-80" href="mailto:{{member.contact.email}}" rel="noopener" target="_blank">
                 <svg class="w-5 h-5">
                     <use xlink:href="/assets/graphics/sprites.svg#email"></use>
                 </svg>
             </a>
             {% endif %}
             {% for item in member.social %}
-            <a class="hover:opacity-80" href="{{item[1]}}" target="blank">
+            <a class="hover:opacity-80" href="{{item[1]}}" rel="noopener" target="_blank">
                 <svg class="w-5 h-5">
                     <use xlink:href="/assets/graphics/sprites.svg#{{item[0]}}"></use>
                 </svg>

diff --git a/_includes/team-card.html b/_includes/team-card.html
@@ -16,7 +16,7 @@
         <div class="flex flex-col h-full">
           <div class="flex flex-col grow">
             <div class="font-serif text-lg mb-0 text-primary">
-              <a href="{{member.contact.homepage}}" target="blank">{{ member.title }}</a>
+              <a href="{{member.contact.homepage}}" rel="noopener" target="_blank">{{ member.title }}</a>
             </div>
             <div class="text-md text-gray-500 mb-4">
               {{ member.position }}
@@ -53,7 +53,7 @@
               <div class="mb-1 text-primary">Publications</div>
               <ul class="list-inside flex justify-start">
                 {% for item in member.publications %}
-                <a class="pl-0 pr-2" href="{{item[1]}}" target="blank">
+                <a class="pl-0 pr-2" href="{{item[1]}}" rel="noopener" target="_blank">
                     <svg class="w-4 h-4">
                         <use xlink:href="/assets/graphics/sprites.svg#{{item[0]}}"></use>
                     </svg>
@@ -67,7 +67,7 @@
               <div class="mb-1 text-primary">Social</div>
               <ul class="list-inside flex justify-start">
                 {% for item in member.social %}
-                <a class="pl-0 pr-2" href="{{item[1]}}" target="blank">
+                <a class="pl-0 pr-2" href="{{item[1]}}" rel="noopener" target="_blank">
                     <svg class="w-4 h-4">
                         <use xlink:href="/assets/graphics/sprites.svg#{{item[0]}}"></use>
                     </svg>

diff --git a/_layouts/contact.html b/_layouts/contact.html
@@ -20,7 +20,7 @@ <h2>{{page.secretariat.title}}</h2>
                 {% if page.secretariat.email %}
                 <div class="h-1/3 py-1">
                     <strong>Email: </strong>
-                    <a href="mailto:{{ page.secretariat.email }}">
+                    <a href="mailto:{{ page.secretariat.email }}" rel="noopener" target="_blank">
                     {{ page.secretariat.email }}
                     </a>
                 </div>

diff --git a/_pages/team.html b/_pages/team.html
@@ -18,7 +18,7 @@ <h2>Former Members</h2>
         {% for exmember in exmembers %}
         <li>
             {% if exmember.contact.homepage %}
-                <a class="underline" href="{{exmember.contact.homepage}}" target="blank">{{ exmember.title }}</a>
+                <a class="underline" href="{{exmember.contact.homepage}}" rel="noopener" target="_blank">{{ exmember.title }}</a>
             {% else %}
                 {{ exmember.title }}
             {% endif %}