Skip to content

Commit cc8526d

Browse files
jonathanlloydjhchen
authored andcommitted
Fix tabnabbing vulnerability in Snow theme (#2439)
1 parent 96e38e9 commit cc8526d

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

themes/snow.js

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -110,7 +110,7 @@ class SnowTooltip extends BaseTooltip {
110110
}
111111
}
112112
SnowTooltip.TEMPLATE = [
113-
'<a class="ql-preview" target="_blank" href="about:blank"></a>',
113+
'<a class="ql-preview" rel="noopener noreferrer" target="_blank" href="about:blank"></a>',
114114
'<input type="text" data-formula="e=mc^2" data-link="https://quilljs.com" data-video="Embed URL">',
115115
'<a class="ql-action"></a>',
116116
'<a class="ql-remove"></a>'

0 commit comments

Comments
 (0)