From f8f0b9fd5f7b217a199a067e60111932dcc6121e Mon Sep 17 00:00:00 2001
From: Gabriel Augendre <gabriel@augendre.info>
Date: Wed, 28 Sep 2022 00:20:34 +0200
Subject: [PATCH] Add rel noopener to target blank links

---
 .../templates/articles/article_change_form.html        |  4 ++--
 src/articles/templates/articles/base.html              | 10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/src/articles/templates/articles/article_change_form.html b/src/articles/templates/articles/article_change_form.html
index 520b558..37c5b57 100644
--- a/src/articles/templates/articles/article_change_form.html
+++ b/src/articles/templates/articles/article_change_form.html
@@ -1,7 +1,7 @@
 {% extends 'admin/change_form.html' %}
 
 {% block object-tools-items %}
-    <li><a href="{{ original.draft_public_url }}" class="historylink" target="_blank">Public draft</a></li>
-    <li><a href="https://python-markdown.github.io/" class="historylink" target="_blank">Markdown cheat sheet</a></li>
+    <li><a href="{{ original.draft_public_url }}" class="historylink" rel="noopener" target="_blank">Public draft</a></li>
+    <li><a href="https://python-markdown.github.io/" class="historylink" rel="noopener" target="_blank">Markdown cheat sheet</a></li>
     {{ block.super }}
 {% endblock %}
diff --git a/src/articles/templates/articles/base.html b/src/articles/templates/articles/base.html
index 8ab6e41..719e3a0 100644
--- a/src/articles/templates/articles/base.html
+++ b/src/articles/templates/articles/base.html
@@ -53,24 +53,24 @@
             Thoughts written here are my own and don't reflect any of my past, present
             or future employer's position.
             The platform behind this blog is
-            <a target="_blank" href="{{ blog.repo.homepage }}">free software</a>.<br>
+            <a rel="noopener" target="_blank" href="{{ blog.repo.homepage }}">free software</a>.<br>
             Articles are released into the public domain through the
             <a rel="license noopener noreferrer"
-                target="_blank"
+                rel="noopener" target="_blank"
                 href="{{ blog.licenses.content.url }}">
                 {{ blog.licenses.content.name }}</a>.
             Code blocks are released into the public domain through
             <a rel="license"
-                target="_blank"
+                rel="noopener" target="_blank"
                 href="{{ blog.licenses.code.url }}">
                 {{ blog.licenses.code.name }}</a>.
             I do appreciate being mentioned as the original author if you decide
             to reuse my works but the licenses don't enforce it.<br>
             Currently deployed version:
-            <a target="_blank" href="{{ git_version_url }}">{{ git_version }}</a>.
+            <a rel="noopener" target="_blank" href="{{ git_version_url }}">{{ git_version }}</a>.
             {% if blog.status_url %}
                 Status of services can be found
-                <a target="_blank" href="{{ blog.status_url }}">here</a>.
+                <a rel="noopener" target="_blank" href="{{ blog.status_url }}">here</a>.
             {% endif %}
         </p>
     </footer>