From 26db658179ff62a735c6b45767008603914c63ed Mon Sep 17 00:00:00 2001
From: Frédéric Buclin <LpSolit@gmail.com>
Date: Mon, 5 Jan 2015 12:50:21 +0100
Subject: Bug 1113630: Set window.opener to null for the URL field to prevent
 interaction between a remote script and the bug report r=gerv a=glob

---
 template/en/default/list/table.html.tmpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'template/en/default/list')

diff --git a/template/en/default/list/table.html.tmpl b/template/en/default/list/table.html.tmpl
index fe7678b02..d3abc9b21 100644
--- a/template/en/default/list/table.html.tmpl
+++ b/template/en/default/list/table.html.tmpl
@@ -213,7 +213,7 @@
         [%- bug.$column.truncate(256, '...') FILTER html -%]
       [% ELSIF column == 'bug_file_loc' && is_safe_url(bug.bug_file_loc) %]
         <a href="[% bug.bug_file_loc FILTER html %]" target="_blank"
-           title="[% bug.bug_file_loc FILTER html %]">
+           rel="noreferrer" title="[% bug.bug_file_loc FILTER html %]">
           [%- display_value(column, bug.$column).truncate(col_abbrev.maxlength, col_abbrev.ellipsis) FILTER html -%]
         </a>
       [% ELSE %]
-- 
cgit v1.2.3-24-g4f1b