From 2da45f5a34cdd76353f23ce449df20f966023532 Mon Sep 17 00:00:00 2001
From: Julian Lam <julian@nodebb.org>
Date: Tue, 3 Apr 2018 16:53:50 -0400
Subject: [PATCH] add noreferrer and noopener to anchors containing external
 links

---
 templates/account/profile.tpl | 2 +-
 templates/login.tpl           | 2 +-
 templates/outgoing.tpl        | 2 +-
 templates/register.tpl        | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/templates/account/profile.tpl b/templates/account/profile.tpl
index 56f4db8..131a2c0 100644
--- a/templates/account/profile.tpl
+++ b/templates/account/profile.tpl
@@ -70,7 +70,7 @@
 
 			<!-- IF websiteName -->
 			<span>[[user:website]]</span>
-			<strong><a href="{websiteLink}" rel="nofollow">{websiteName}</a></strong>
+			<strong><a href="{websiteLink}" rel="nofollow noopener noreferrer">{websiteName}</a></strong>
 			<!-- ENDIF websiteName -->
 
 			<!-- IF location -->
diff --git a/templates/login.tpl b/templates/login.tpl
index ffc083e..7ba736c 100644
--- a/templates/login.tpl
+++ b/templates/login.tpl
@@ -55,7 +55,7 @@
 			<h4>[[login:alternative_logins]]</h4>
 			<ul class="alt-logins">
 				<!-- BEGIN authentication -->
-				<li class="{authentication.name}"><a rel="nofollow" target="_top" href="{config.relative_path}{authentication.url}"><i class="fa {authentication.icon} fa-3x"></i></a></li>
+				<li class="{authentication.name}"><a rel="nofollow noopener noreferrer" target="_top" href="{config.relative_path}{authentication.url}"><i class="fa {authentication.icon} fa-3x"></i></a></li>
 				<!-- END authentication -->
 			</ul>
 		</div>
diff --git a/templates/outgoing.tpl b/templates/outgoing.tpl
index b460118..48e7ede 100644
--- a/templates/outgoing.tpl
+++ b/templates/outgoing.tpl
@@ -7,7 +7,7 @@
 			[[notifications:outgoing_link_message, {title}]]
 		</h3>
 		<p>
-			<a href="{outgoing}" rel="nofollow" class="btn btn-primary btn-lg">[[notifications:continue_to, {outgoing}]]</a>
+			<a href="{outgoing}" rel="nofollow noopener noreferrer" class="btn btn-primary btn-lg">[[notifications:continue_to, {outgoing}]]</a>
 			<a id="return-btn" href="#" class="btn btn-lg btn-warning">[[notifications:return_to, {title}]]</a>
 		</p>
 	</div>
diff --git a/templates/register.tpl b/templates/register.tpl
index 079b1c6..84b289a 100644
--- a/templates/register.tpl
+++ b/templates/register.tpl
@@ -68,7 +68,7 @@
 			<h4>[[register:alternative_registration]]</h4>
 			<ul class="alt-logins">
 				<!-- BEGIN authentication -->
-				<li class="{authentication.name}"><a rel="nofollow" target="_top" href="{config.relative_path}{authentication.url}"><i class="fa {authentication.icon} fa-3x"></i></i></a></li>
+				<li class="{authentication.name}"><a rel="nofollow noopener noreferrer" target="_top" href="{config.relative_path}{authentication.url}"><i class="fa {authentication.icon} fa-3x"></i></i></a></li>
 				<!-- END authentication -->
 			</ul>
 		</div>