revi-archive/phorge-phorge
1
0
Fork 0
mirror of https://we.phorge.it/source/phorge.git synced 2024-11-30 18:52:42 +01:00
Code Issues Releases Wiki Activity
phorge-phorge/src/applications/search
History
epriestley 05a4c55c52 Explicitly add rel="noreferrer" to all external links 
Summary: See D19117. Instead of automatically figuring this out inside `phutil_tag()`, explicitly add rel="noreferrer" at the application level to all external links.

Test Plan:
  - Grepped for `_blank`, `isValidRemoteURIForLink`, checked all callsites for user-controlled data.
  - Created a link menu item, verified noreferrer in markup.
  - Created a link custom field, verified no referrer in markup.
  - Verified noreferrer for `{nav href=...}`.

Subscribers: PHID-OPKG-gm6ozazyms6q6i22gyam

Differential Revision: https://secure.phabricator.com/D19118
2018-02-17 17:46:11 -08:00
..
application Separate saved queries in applications into "personal" and "global" queries 2017-08-24 15:24:34 -07:00
applicationpanel Fix Search Application Config 2017-07-18 17:44:56 +00:00
buckets Use new Differential bucketing logic on default (non-dashboard) homepage 2016-05-19 15:20:39 -07:00
constants Create a virtual "core" field in the Ferret engine for "title and body together" 2017-09-01 09:40:56 -07:00
controller Modularize the "jump nav" behaviors in global search 2018-02-14 18:08:07 -08:00
editor Validate menu item fields (links, projects, dashboards, applications, forms, etc) 2017-01-20 11:58:25 -08:00
engine Allow third-party code to extend upstream datasources via EngineExtension 2018-02-14 18:11:51 -08:00
engineextension Allow third-party code to extend upstream datasources via EngineExtension 2018-02-14 18:11:51 -08:00
exception Allow administrators to get a list of users who don't have MFA configured 2017-03-15 17:49:01 -07:00
ferret Allow the Ferret engine to remove "common" ngrams from the index 2017-10-03 13:27:42 -07:00
field Add a discovery format hint for date fields in SearchEngine UIs 2018-01-26 13:11:10 -08:00
fulltextstorage Make "mysql" mean "Ferret engine" in Fulltext search 2017-09-11 18:05:12 -07:00
garbagecollector Add a garbage collector for common ngrams 2017-10-05 11:41:18 -07:00
index Separate fulltext engine extensions into "enrich" and "index" phases 2017-09-01 09:40:11 -07:00
interface Extend "fulltext" and "ngrams" interfaces from "indexable" interface 2017-04-17 12:59:41 -07:00
management Clarify acceptable values for --threshold in search ngrams 2017-10-17 14:32:25 -07:00
menuitem Explicitly add rel="noreferrer" to all external links 2018-02-17 17:46:11 -08:00
ngrams Consolidate more Ferret engine code into FerretEngine 2017-09-05 11:57:18 -07:00
phidtype Rename "ProfilePanelConfiguration" to "ProfileMenuItemConfiguration" 2016-12-11 11:44:22 -08:00
query Improve search highlighting for CJK and substring queries 2017-09-22 11:34:46 -07:00
relationship Render parent and child tasks in Maniphest with a graph trace 2016-07-01 10:41:07 -07:00
storage Separate saved queries in applications into "personal" and "global" queries 2017-08-24 15:24:34 -07:00
typeahead Rename "QuickSearch" Engine/EngineExtension to "Datasource" 2018-02-14 18:03:03 -08:00
view Improve search highlighting for CJK and substring queries 2017-09-22 11:34:46 -07:00
worker Convert all "DocumentIndexers" into "FulltextEngines" 2015-12-21 17:25:23 -08:00