Mirrors/sftpgo
1
0
Fork 0
mirror of https://github.com/drakkan/sftpgo.git synced 2025-12-07 14:50:55 +03:00
Code Issues Packages Projects Releases Wiki Activity

add noopener noreferrer to href with target _blank

Browse Source 
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
This commit is contained in:
Nicola Murino
2024-08-20 11:24:42 +02:00
parent 84f3f877a5
commit c563b24f1b
8 changed files with 13 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
templates/webclient/files.html
View File

@@ -721,7 +721,7 @@ explicit grant from the SFTPGo Team (support@sftpgo.com).
let view_url = row['url'];
view_url = view_url.replace('{{.FilesURL}}','{{.ViewPDFURL}}');
previewDiv = `<div class="ms-2" data-kt-filemanger-table="view_item">
<a href="${view_url}" target="_blank" class="btn btn-sm btn-icon btn-light btn-active-light-primary">
<a href="${view_url}" target="_blank" rel="noopener noreferrer" class="btn btn-sm btn-icon btn-light btn-active-light-primary">
<i class="ki-duotone ki-eye fs-6 m-0">
<span class="path1"></span>
<span class="path2"></span>
@@ -735,7 +735,7 @@ explicit grant from the SFTPGo Team (support@sftpgo.com).
//{{- if not .ShareUploadBaseURL}}
if (data && (supportedEditExtensions.includes(extension) || supportedEditFilenames.includes(filename.toLowerCase()))){
previewDiv = `<div class="ms-2" data-kt-filemanger-table="view_item">
<a href="${data}" target="_blank" class="btn btn-sm btn-icon btn-light btn-active-light-primary">
<a href="${data}" target="_blank" rel="noopener noreferrer" class="btn btn-sm btn-icon btn-light btn-active-light-primary">
<i class="ki-duotone ki-eye fs-6 m-0">
<span class="path1"></span>
<span class="path2"></span>
@@ -1072,7 +1072,7 @@ explicit grant from the SFTPGo Team (support@sftpgo.com).
let currentDir = '{{.CurrentDir}}';
let ts = new Date().getTime().toString();
let files = JSON.stringify(filesArray);
$(`<form method="post" action="${downloadURL}?path=${currentDir}&_=${ts}" target="_blank">
$(`<form method="post" action="${downloadURL}?path=${currentDir}&_=${ts}" target="_blank" rel="noopener noreferrer">
<input type="hidden" name="_form_token" value="${token}">
<textarea name="files" hidden>${files}</textarea>
</form>`).appendTo('body').submit().remove();