1
0
Fork 0
mirror of https://we.phorge.it/source/phorge.git synced 2024-11-24 07:42:40 +01:00
phorge-phorge/src/applications/phurl
epriestley 05a4c55c52 Explicitly add rel="noreferrer" to all external links
Summary: See D19117. Instead of automatically figuring this out inside `phutil_tag()`, explicitly add rel="noreferrer" at the application level to all external links.

Test Plan:
  - Grepped for `_blank`, `isValidRemoteURIForLink`, checked all callsites for user-controlled data.
  - Created a link menu item, verified noreferrer in markup.
  - Created a link custom field, verified no referrer in markup.
  - Verified noreferrer for `{nav href=...}`.

Subscribers: PHID-OPKG-gm6ozazyms6q6i22gyam

Differential Revision: https://secure.phabricator.com/D19118
2018-02-17 17:46:11 -08:00
..
application Change PhabricatorPhurlURLViewController to use EditEngine for commenting 2017-04-17 10:19:21 -07:00
capability Ref T6049, Add Phurl URL create capability 2015-11-20 10:11:06 -08:00
conduit Expose conduit API methods for Phurl URLs 2016-09-27 00:21:49 -04:00
controller Change PhabricatorPhurlURLViewController to use EditEngine for commenting 2017-04-17 10:19:21 -07:00
editor Use object PHIDs for "Thread-Topic" headers in mail 2018-02-08 06:21:00 -08:00
mail Fix two issues with Phurl / Badges mail generation 2015-12-22 08:19:53 -08:00
phid Mark PhabricatorPHIDType::getPHIDTypeApplicationClass() as abstract 2015-11-03 06:47:12 +11:00
query Reduce application search engine results list for Dashboards 2017-02-22 12:42:43 -08:00
remarkup Explicitly add rel="noreferrer" to all external links 2018-02-17 17:46:11 -08:00
storage Update Phurl for modular transactions 2017-02-24 08:30:47 -08:00
typeahead Suggest Phurl URLs on "((..." in Remarkup text areas 2018-02-16 09:56:39 -08:00
xaction Update Phurl for modular transactions 2017-02-24 08:30:47 -08:00