From 3baf54bfeebe69031ffb9a47cbb5ac2401619644 Mon Sep 17 00:00:00 2001
From: =?utf8?q?Fr=C3=A9d=C3=A9ric=20P=C3=A9ters?= <fpeters@0d.be>
Date: Sat, 23 May 2020 21:11:59 +0200
Subject: [PATCH] add rel="noopener" to links opening in new tabs

---
 panikweb_templates/static/js/specifics.js        | 1 +
 panikweb_templates/templates/includes/audio.html | 4 ++--
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/panikweb_templates/static/js/specifics.js b/panikweb_templates/static/js/specifics.js
index 32a7f17..b679328 100644
--- a/panikweb_templates/static/js/specifics.js
+++ b/panikweb_templates/static/js/specifics.js
@@ -135,6 +135,7 @@ $(function() {
 					return false;
 				}else{
 					$(this).attr('target','_blank');
+					$(this).attr('rel', 'noopenenr');
 					$("#All a, #All area").removeClass('loading');
 					return true;
 				}
diff --git a/panikweb_templates/templates/includes/audio.html b/panikweb_templates/templates/includes/audio.html
index e23cce2..673452d 100644
--- a/panikweb_templates/templates/includes/audio.html
+++ b/panikweb_templates/templates/includes/audio.html
@@ -28,12 +28,12 @@
 			><span class="sr-only">{% trans "Download file" %}</span></button>
 		<div class="download-links hidden-download-links">
 			{% if sound|is_format_available:'ogg' %}
-			<a target="_blank" class="button inBlock" href="{{ sound|format_url:'ogg' }}">
+			<a target="_blank" rel="noopener" class="button inBlock" href="{{ sound|format_url:'ogg' }}">
 				<span class="icon-file">&nbsp;ogg</span>
 			</a>
 			{% endif %}
 			{% if sound|is_format_available:'mp3' %}
-			<a target="_blank" class="button inBlock" href="{{ sound|format_url:'mp3' }}">
+			<a target="_blank" rel="noopener" class="button inBlock" href="{{ sound|format_url:'mp3' }}">
 				<span class="icon-file">&nbsp;mp3</span>
 			</a>
 			{% endif %}
-- 
2.39.2