summaryrefslogtreecommitdiff
path: root/app/views/profiles
diff options
context:
space:
mode:
authorJacob Schatz <jschatz@gitlab.com>2017-03-15 21:21:48 +0000
committerDJ Mountney <david@twkie.net>2017-03-20 18:51:36 -0700
commitc5a9d73ad8a141166d871e551027208014a281c0 (patch)
tree2c67e06925166205e40c35588732285260bdecdb /app/views/profiles
parent153b594c06c994a8c9b4a92e9c5c33c3cdb4e0e0 (diff)
downloadgitlab-ce-c5a9d73ad8a141166d871e551027208014a281c0.tar.gz
Merge branch 'fix-links-target-blank' into 'security'
Adds rel="noopener noreferrer" to all links with target="_blank" See merge request !2071
Diffstat (limited to 'app/views/profiles')
-rw-r--r--app/views/profiles/show.html.haml2
1 files changed, 1 insertions, 1 deletions
diff --git a/app/views/profiles/show.html.haml b/app/views/profiles/show.html.haml
index d551754a2e5..c74b3249a13 100644
--- a/app/views/profiles/show.html.haml
+++ b/app/views/profiles/show.html.haml
@@ -18,7 +18,7 @@
or change it at #{link_to Gitlab.config.gravatar.host, "http://" + Gitlab.config.gravatar.host}
.col-lg-9
.clearfix.avatar-image.append-bottom-default
- = link_to avatar_icon(@user, 400), target: '_blank' do
+ = link_to avatar_icon(@user, 400), target: '_blank', rel: 'noopener noreferrer' do
= image_tag avatar_icon(@user, 160), alt: '', class: 'avatar s160'
%h5.prepend-top-0
Upload new avatar