fix(security): aタグにrel="noopener"をつける

2024-01-14 02:36:01 +09:00
parent 622d82b607
commit c5a86174a7
11 changed files with 14 additions and 14 deletions
--- a/packages/backend/src/server/web/views/info-card.pug
+++ b/packages/backend/src/server/web/views/info-card.pug
@@ -43,7 +43,7 @@ html
 			}

 	body
-		a#a(href=`https://${host}` target="_blank")
+		a#a(href=`https://${host}` rel="noopener" target="_blank")
 			header#banner(style=`background-image: url(${meta.bannerUrl})`)
 				div#title= meta.name || host
 		div#content