From fafc936980551c1fd36b53062daa58cc1cc9514e Mon Sep 17 00:00:00 2001
From: Chase Sillevis <chase@sillevis.net>
Date: Thu, 24 Jan 2019 13:37:57 +0100
Subject: [PATCH 1/2] Markdown: fix opening links in a new tab

---
 packages/rocketchat-markdown/lib/parser/marked/marked.js | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/packages/rocketchat-markdown/lib/parser/marked/marked.js b/packages/rocketchat-markdown/lib/parser/marked/marked.js
index f8ebd9949233..186e005befc4 100644
--- a/packages/rocketchat-markdown/lib/parser/marked/marked.js
+++ b/packages/rocketchat-markdown/lib/parser/marked/marked.js
@@ -59,6 +59,12 @@ renderer.blockquote = function(quote) {
 	return `<blockquote class="background-transparent-darker-before">${ quote }</blockquote>`;
 };
 
+const linkRenderer = renderer.link;
+renderer.link = function(href, title, text) {
+	const html = linkRenderer.call(renderer, href, title, text);
+	return html.replace(/^<a /, '<a target="_blank" rel="nofollow" ');
+};
+
 const highlight = function(code, lang) {
 	if (!lang) {
 		return code;

From f4a6246051d1ee350c68b87f9f58ba03258a7888 Mon Sep 17 00:00:00 2001
From: Tasso Evangelista <tasso@tassoevan.me>
Date: Sun, 17 Feb 2019 18:34:43 +0100
Subject: [PATCH 2/2] Update
 packages/rocketchat-markdown/lib/parser/marked/marked.js

Co-Authored-By: DeviaVir <chase@sillevis.net>
---
 packages/rocketchat-markdown/lib/parser/marked/marked.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/rocketchat-markdown/lib/parser/marked/marked.js b/packages/rocketchat-markdown/lib/parser/marked/marked.js
index 186e005befc4..bb410f8d701c 100644
--- a/packages/rocketchat-markdown/lib/parser/marked/marked.js
+++ b/packages/rocketchat-markdown/lib/parser/marked/marked.js
@@ -62,7 +62,7 @@ renderer.blockquote = function(quote) {
 const linkRenderer = renderer.link;
 renderer.link = function(href, title, text) {
 	const html = linkRenderer.call(renderer, href, title, text);
-	return html.replace(/^<a /, '<a target="_blank" rel="nofollow" ');
+	return html.replace(/^<a /, '<a target="_blank" rel="nofollow noopener noreferrer" ');
 };
 
 const highlight = function(code, lang) {