From e48c2cf75b9c525bf968838027cd4f882bda36b1 Mon Sep 17 00:00:00 2001
From: Boopesh Mahendran <bmahendr@adobe.com>
Date: Sat, 5 Aug 2017 13:30:49 +0530
Subject: [PATCH] Add rel noopener noreferrer to target='_blank' anchor
 elements

---
 views/layouts/main.handlebars | 10 +++++-----
 views/unsupported.handlebars  |  2 +-
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/views/layouts/main.handlebars b/views/layouts/main.handlebars
index 15a1fdce..cbdfb522 100644
--- a/views/layouts/main.handlebars
+++ b/views/layouts/main.handlebars
@@ -27,7 +27,7 @@
         <img src="/resources/send_logo.svg" alt="Send"/><h1 class="site-title">Send</h1>
       </a>
       <div class="site-subtitle">
-        <a href="https://testpilot.firefox.com" target="_blank">Firefox Test Pilot</a>
+        <a href="https://testpilot.firefox.com" target="_blank" rel="noopener noreferrer">Firefox Test Pilot</a>
         <div data-l10n-id="siteSubtitle">web experiment</div>
       </div>
     </div>
@@ -43,12 +43,12 @@
   </div>
   <div class="footer">
     <div class="legal-links">
-      <a href="https://www.mozilla.org" target="_blank"><img class="mozilla-logo" src="/resources/mozilla-logo.svg"/></a>
-      <a href="https://www.mozilla.org/about/legal" data-l10n-id="footerLinkLegal" target="_blank">Legal</a>
-      <a href="https://testpilot.firefox.com/about" data-l10n-id="footerLinkAbout" target="_blank">About Test Pilot</a>
+      <a href="https://www.mozilla.org" target="_blank" rel="noopener noreferrer"><img class="mozilla-logo" src="/resources/mozilla-logo.svg"/></a>
+      <a href="https://www.mozilla.org/about/legal" data-l10n-id="footerLinkLegal" target="_blank" rel="noopener noreferrer">Legal</a>
+      <a href="https://testpilot.firefox.com/about" data-l10n-id="footerLinkAbout" target="_blank" rel="noopener noreferrer">About Test Pilot</a>
       <a href="/legal" data-l10n-id="footerLinkPrivacy" target="_blank">Privacy</a>
       <a href="/legal" data-l10n-id="footerLinkTerms" target="_blank">Terms</a>
-      <a href="https://www.mozilla.org/privacy/websites/#cookies" data-l10n-id="footerLinkCookies" target="_blank">Cookies</a>
+      <a href="https://www.mozilla.org/privacy/websites/#cookies" data-l10n-id="footerLinkCookies" target="_blank" rel="noopener noreferrer">Cookies</a>
     </div>
     <div class="social-links">
       <a href="https://github.com/mozilla/send" target="_blank" rel="noreferrer noopener"><img class="github" src="/resources/github-icon.svg"/></a>
diff --git a/views/unsupported.handlebars b/views/unsupported.handlebars
index 8f745e35..75e90695 100644
--- a/views/unsupported.handlebars
+++ b/views/unsupported.handlebars
@@ -9,7 +9,7 @@
   {{else}}
     <div class="description" data-l10n-id="notSupportedDetail">Unfortunately this browser does not support the web technology that powers Firefox Send. You’ll need to try another browser. We recommend Firefox!</div>
     <div class="description"><a href="https://github.com/mozilla/send/blob/master/docs/faq.md#why-is-my-browser-not-supported" data-l10n-id="notSupportedLink" target="_blank" rel="noopener noreferrer">Why is my browser not supported?</a></div>
-    <a id="dl-firefox" href="https://www.mozilla.org/firefox/new/?scene=2" target="_blank">
+    <a id="dl-firefox" href="https://www.mozilla.org/firefox/new/?scene=2" target="_blank" rel="noopener noreferrer">
       <img src="/resources/firefox_logo-only.svg" class="firefox-logo" alt="Firefox"/>
       <div class="unsupported-button-text">Firefox<br>
         <span data-l10n-id="downloadFirefoxButtonSub">Free Download</span>