mirror of
https://github.com/BookStackApp/BookStack.git
synced 2025-07-31 15:24:31 +03:00
Fixes minor vulnerability when using target="_blank" on links (RSPEC-5148)
This commit is contained in:
@ -1,7 +1,7 @@
|
||||
@if(count(setting('app-footer-links', [])) > 0)
|
||||
<footer>
|
||||
@foreach(setting('app-footer-links', []) as $link)
|
||||
<a href="{{ $link['url'] }}" target="_blank">{{ strpos($link['label'], 'trans::') === 0 ? trans(str_replace('trans::', '', $link['label'])) : $link['label'] }}</a>
|
||||
<a href="{{ $link['url'] }}" target="_blank" rel="noopener">{{ strpos($link['label'], 'trans::') === 0 ? trans(str_replace('trans::', '', $link['label'])) : $link['label'] }}</a>
|
||||
@endforeach
|
||||
</footer>
|
||||
@endif
|
Reference in New Issue
Block a user