From 953035e0cce0142e666cfdc73f48aed640f98e9b Mon Sep 17 00:00:00 2001
From: Franzz <francois@lutran.fr>
Date: Wed, 1 Dec 2021 22:01:12 +0100
Subject: [PATCH] noopener on external links

---
 masks/email_conf.html   | 2 +-
 masks/email_update.html | 6 +++---
 masks/project.html      | 4 ++--
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/masks/email_conf.html b/masks/email_conf.html
index b6edcd3..dde63cd 100644
--- a/masks/email_conf.html
+++ b/masks/email_conf.html
@@ -25,7 +25,7 @@
 			</tr>
 			<tr>
 				<td colspan="2">
-					<p>[#]lang:email_unsubscribe[#] <a href="[#]unsubscribe_link[#]" target="_blank">[#]lang:email_unsub_btn[#]</a></p>
+					<p>[#]lang:email_unsubscribe[#] <a href="[#]unsubscribe_link[#]" target="_blank" rel="noopener">[#]lang:email_unsub_btn[#]</a></p>
 				</td>
 			</tr>
 		</table>
diff --git a/masks/email_update.html b/masks/email_update.html
index 9e5b98f..a28f68e 100644
--- a/masks/email_update.html
+++ b/masks/email_update.html
@@ -14,7 +14,7 @@
 			<tr>
 				<td colspan="2">
 					<div style="background-color:#6dff58;color:#326526;border-radius:3px;padding:1rem;margin-top:1rem;display:inline-block;box-shadow: 2px 2px 3px 0px rgba(0,0,0,.5);">
-						<a href="[#]local_server[#]" target="_blank"><img style="border-radius:3px;" src="[#]geo_server[#]?a=tile&amp;id=static.marker&amp;z=13&amp;x=[#]longitude[#]&amp;y=[#]latitude[#]&amp;marker=[#]local_server[#]images/footprint_mapbox.png&amp;token=[#]token[#]" alt="position" /></a>
+						<a href="[#]local_server[#]" target="_blank" rel="noopener"><img style="border-radius:3px;" src="[#]geo_server[#]?a=tile&amp;id=static.marker&amp;z=13&amp;x=[#]longitude[#]&amp;y=[#]latitude[#]&amp;marker=[#]local_server[#]images/footprint_mapbox.png&amp;token=[#]token[#]" alt="position" /></a>
 						<br />[#]lat_dms[#] [#]lon_dms[#]
 						<br />[#]date_time[#] ([#]timezone[#])
 					</div>
@@ -27,7 +27,7 @@
 						<!-- [PART] news [START] -->
 						<tr>
 							<td>
-								<a href="[#]local_server[#]#project-[#]project[#]-[#]type[#]-[#]id[#]" target="_blank" style="text-decoration:none;background-color:#EEE;color:#333;margin-bottom:1rem;border-radius:3px;padding:5%;display:inline-block;width:90%;box-shadow: 2px 2px 3px 0px rgba(0,0,0,.5);">
+								<a href="[#]local_server[#]#project-[#]project[#]-[#]type[#]-[#]id[#]" target="_blank" rel="noopener" style="text-decoration:none;background-color:#EEE;color:#333;margin-bottom:1rem;border-radius:3px;padding:5%;display:inline-block;width:90%;box-shadow: 2px 2px 3px 0px rgba(0,0,0,.5);">
 									<!-- [PART] media [START] --><img src="[#]local_server[#][#]thumb_path[#]" style="max-height:200px;image-orientation:from-image;" /><br /><span>[#]comment[#]</span><!-- [PART] media [END] -->
 									<!-- [PART] post [START] --><span>[#]content[#]</span><br /><span style="margin-top:0.5em;float:right;">--[#]formatted_name[#]</span><!-- [PART] post [END] -->
 								</a>
@@ -39,7 +39,7 @@
 			</tr>
 			<tr>
 				<td colspan="2">
-					<p>[#]lang:email_unsubscribe[#] <a href="[#]unsubscribe_link[#]" target="_blank">[#]lang:email_unsub_btn[#]</a></p>
+					<p>[#]lang:email_unsubscribe[#] <a href="[#]unsubscribe_link[#]" target="_blank" rel="noopener">[#]lang:email_unsub_btn[#]</a></p>
 				</td>
 			</tr>
 		</table>
diff --git a/masks/project.html b/masks/project.html
index dc3430d..b7b4e12 100644
--- a/masks/project.html
+++ b/masks/project.html
@@ -33,7 +33,7 @@
 					</div>
 				</div>
 			</div>
-			<div class="settings-footer"><a href="https://git.lutran.fr/franzz/spot" title="[#]lang:credits_git[#]" target="_blank"><i class="fa fa-credits push"></i>[#]lang:credits_project[#]</a> [#]lang:credits_license[#]</div>
+			<div class="settings-footer"><a href="https://git.lutran.fr/franzz/spot" title="[#]lang:credits_git[#]" target="_blank" rel="noopener"><i class="fa fa-credits push"></i>[#]lang:credits_project[#]</a> [#]lang:credits_license[#]</div>
 		</div>
 	</div>
 	<div id="feed">
@@ -993,7 +993,7 @@ function getGoogleMapsLink(asInfo) {
 		href:'https://www.google.com/maps/place/'+asInfo.lat_dms+'+'+asInfo.lon_dms+'/@'+asInfo.latitude+','+asInfo.longitude+',10z',
 		title: oSpot.lang('see_on_google'),
 		target: '_blank',
-		rel: 'noreferrer'
+		rel: 'noreferrer noopener'
 	}).text(asInfo.lat_dms+' '+asInfo.lon_dms);
 }