From c40e9bc039b425b385a478cbbbc46df934c98961 Mon Sep 17 00:00:00 2001
From: Bryan Newbold <bnewbold@archive.org>
Date: Wed, 14 Oct 2020 02:01:18 -0700
Subject: web: rel=noopener for outlinks

Via Lighthouse. Apparently destination pages can reach-back to the
opening window via JS API. Weird!

Note that instead of noreferrer, we have a meta tag to have off-domain
(off-origin) links only include the origin name (eg, hostname) instead
of full URL with query paths. So we don't forward user queries to
non-archive.org domains.
---
 fatcat_scholar/templates/home.html | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

(limited to 'fatcat_scholar/templates/home.html')

diff --git a/fatcat_scholar/templates/home.html b/fatcat_scholar/templates/home.html
index dbf7531..7c430fe 100644
--- a/fatcat_scholar/templates/home.html
+++ b/fatcat_scholar/templates/home.html
@@ -45,7 +45,7 @@
   <div class="ui four doubling cards">
 
       <div class="ui card" style="max-width: 250px;">
-        <a class="image" href="https://web.archive.org/web/20171006225602/https://burnstrauma.biomedcentral.com/track/pdf/10.1186/s41038-017-0090-z?site=burnstrauma.biomedcentral.com" target="_blank">
+        <a class="image" href="https://web.archive.org/web/20171006225602/https://burnstrauma.biomedcentral.com/track/pdf/10.1186/s41038-017-0090-z?site=burnstrauma.biomedcentral.com" target="_blank" rel="noopener">
           <img src="/static/thumbnail-c9e87f84.jpg" alt="PDF thumbnail">
         </a>
         <div class="content">
@@ -59,7 +59,7 @@
       </div>
 
       <div class="ui card" style="max-width: 250px;">
-        <a class="image" href="https://web.archive.org/web/20200328205104/http://europepmc.org/backend/ptpmcrender.fcgi?accid=PMC5180799&blobtype=pdf" target="_blank">
+        <a class="image" href="https://web.archive.org/web/20200328205104/http://europepmc.org/backend/ptpmcrender.fcgi?accid=PMC5180799&blobtype=pdf" target="_blank" rel="noopener">
           <img src="/static/thumbnail-1e13eaf1.jpg" alt="PDF thumbnail">
         </a>
         <div class="content">
@@ -73,7 +73,7 @@
       </div>
 
       <div class="ui card tablet-hide" style="max-width: 250px;">
-        <a class="image" href="https://web.archive.org/web/2017/http://journals.plos.org/plosone/article/file?id=10.1371/journal.pone.0010071&type=printable" target="_blank">
+        <a class="image" href="https://web.archive.org/web/2017/http://journals.plos.org/plosone/article/file?id=10.1371/journal.pone.0010071&type=printable" target="_blank" rel="noopener">
           <img src="/static/thumbnail-60cd26da.jpg" alt="PDF thumbnail">
         </a>
         <div class="content">
@@ -87,7 +87,7 @@
       </div>
 
       <div class="ui card mobile-hide" style="max-width: 250px;">
-        <a class="image" href="https://web.archive.org/web/20180730094628/https://www.jstage.jst.go.jp/article/hrj/10/2/10_2_267/_pdf" target="_blank">
+        <a class="image" href="https://web.archive.org/web/20180730094628/https://www.jstage.jst.go.jp/article/hrj/10/2/10_2_267/_pdf" target="_blank" rel="noopener">
           <img src="/static/thumbnail-7a56065b.jpg" alt="PDF thumbnail">
         </a>
         <div class="content">
-- 
cgit v1.2.3