[tryton-commits] changeset in sao:5.0 Add noreferrer noopener to external URL

[Cédric Krier]

changeset 21b7b747377a in sao:5.0
details: https://hg.tryton.org/sao?cmd=changeset;node=21b7b747377a
description:
        Add noreferrer noopener to external URL

        issue9089
        review289401002
        (grafted from ecd678a55935a666e61c429a6acd631f35484b5f)
diffstat:

 CHANGELOG        |  2 ++
 src/common.js    |  3 ++-
 src/view/form.js |  3 ++-
 src/view/tree.js |  8 ++++----
 4 files changed, 10 insertions(+), 6 deletions(-)

diffs (67 lines):

diff -r 7eaa38f7794d -r 21b7b747377a CHANGELOG
--- a/CHANGELOG Sat Feb 29 00:55:41 2020 +0100
+++ b/CHANGELOG Mon Mar 09 18:08:24 2020 +0100
@@ -1,3 +1,5 @@
+* Add noreferrer noopener to external URL (issue9089)
+
 Version 5.0.19 - 2020-02-02
 * Bug fixes (see mercurial logs for details)
 
diff -r 7eaa38f7794d -r 21b7b747377a src/common.js
--- a/src/common.js     Sat Feb 29 00:55:41 2020 +0100
+++ b/src/common.js     Mon Mar 09 18:08:24 2020 +0100
@@ -3135,7 +3135,8 @@
                     .append(jQuery('<a/>', {
                         'class': 'btn btn-link',
                         href: Sao.config.roundup.url,
-                        target: '_blank'
+                        target: '_blank',
+                        rel: 'noreferrer noopener',
                     }).text(Sao.i18n.gettext('Report Bug')))));
             jQuery('<button/>', {
                 'class': 'btn btn-primary',
diff -r 7eaa38f7794d -r 21b7b747377a src/view/form.js
--- a/src/view/form.js  Sat Feb 29 00:55:41 2020 +0100
+++ b/src/view/form.js  Mon Mar 09 18:08:24 2020 +0100
@@ -3838,7 +3838,8 @@
                     this, field_name, model, attributes);
             this.button = jQuery('<a/>', {
                 'class': 'btn btn-default',
-                'target': '_new'
+                'target': '_blank',
+                'rel': 'noreferrer noopener',
             }).appendTo(jQuery('<span/>', {
                 'class': 'input-group-btn'
             }).appendTo(this.group));
diff -r 7eaa38f7794d -r 21b7b747377a src/view/tree.js
--- a/src/view/tree.js  Sat Feb 29 00:55:41 2020 +0100
+++ b/src/view/tree.js  Mon Mar 09 18:08:24 2020 +0100
@@ -1494,7 +1494,8 @@
             var cell;
             if (this.protocol) {
                 cell = jQuery('<a/>', {
-                    'target': '_new'
+                    'target': '_blank',
+                    'rel': 'noreferrer noopener',
                 });
                 cell.append(jQuery('<img/>'));
                 cell.click({'cell': cell}, this.clicked.bind(this));
@@ -1535,7 +1536,7 @@
                                 break;
                         }
                     }
-                    cell.attr('src', value);
+                    cell.attr('href', value);
                 }
                 if (this.icon) {
                     if (this.icon in record.model.fields) {
@@ -1566,8 +1567,7 @@
             return cell;
         },
         clicked: function(event) {
-            event.preventDefault();  // prevent edition
-            window.open(event.data.cell.attr('src'), '_blank');
+            event.stopPropagation();  // prevent edition
         }
     });