From 040e6a9a4c4393c27f5613ed7a25c9719a132b5b Mon Sep 17 00:00:00 2001
From: Julian Lam <julian@nodebb.org>
Date: Fri, 19 Jun 2020 13:40:25 -0400
Subject: [PATCH] fix: reverse tabnabbing exploit in post images

---
 public/src/client/topic/images.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/public/src/client/topic/images.js b/public/src/client/topic/images.js
index 3be0303e43..c1dc5866db 100644
--- a/public/src/client/topic/images.js
+++ b/public/src/client/topic/images.js
@@ -25,7 +25,7 @@ define('forum/topic/images', [], function () {
 			if (!$this.parent().is('a')) {
 				$this.wrap('<a href="' + src + '" ' +
 					(!srcExt && altExt ? ' download="' + altFilename + '" ' : '') +
-					' target="_blank" >');
+					' target="_blank" rel="noopener">');
 			}
 		});
 	};