Disable referrer (TNL-1144)

edx · Jan 29, 2015 · a1ffcc5 · a1ffcc5
1 parent 753a3be
commit a1ffcc5
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 6 deletions.
diff --git a/common/static/js/vendor/noreferrer.js b/common/static/js/vendor/noreferrer.js
diff --git a/lms/templates/footer-edx-new.html b/lms/templates/footer-edx-new.html
@@ -2,7 +2,6 @@
 <%! from django.core.urlresolvers import reverse %>
 <%! from django.utils.translation import ugettext as _ %>
 <%namespace name='static' file='static_content.html'/>
-
 ## WARNING: These files are specific to edx.org and are not used in installations outside of that domain. Open edX users will want to use the file "footer.html" for any changes or overrides.
 <div class="wrapper wrapper-footer edx-footer edx-footer-new">
   <footer id="footer-global" class="footer-global" role="contentinfo" aria-label="Footer">
@@ -65,31 +64,31 @@ <h2 class="footer-follow-title">${_("Follow Us")}</h2>
       <div class="footer-follow-links">
         ## Translators: This is the website name of www.twitter.com. Please
         ## translate this the way that Twitter advertises in your language.
-        <a href="${settings.PLATFORM_TWITTER_URL}" title="${_("Twitter")}">
+        <a href="${settings.PLATFORM_TWITTER_URL}" title="${_("Twitter")}" rel="noreferrer">
           <i class="icon fa fa-twitter element-invisible"></i>
           <span class="copy">${_("Twitter")}</span>
         </a>
         ## Translators: This is the website name of www.facebook.com. Please
         ## translate this the way that Facebook advertises in your language.
-        <a href="${settings.PLATFORM_FACEBOOK_ACCOUNT}" title="${_("Facebook")}">
+        <a href="${settings.PLATFORM_FACEBOOK_ACCOUNT}" title="${_("Facebook")}" rel="noreferrer">
           <i class="icon fa fa-facebook element-invisible"></i>
           <span class="copy">${_("Facebook")}</span>
         </a>
         ## Translators: This is the website name of www.meetup.com. Please
         ## translate this the way that Meetup advertises in your language.
-        <a href="${settings.PLATFORM_MEETUP_URL}" title="${_("Meetup")}">
+        <a href="${settings.PLATFORM_MEETUP_URL}" title="${_("Meetup")}" rel="noreferrer">
           <i class="icon fa fa-calendar element-invisible"></i>
           <span class="copy">${_("Meetup")}</span>
         </a>
         ## Translators: This is the website name of www.linked.com. Please
         ## translate this the way that LinkedIn advertises in your language.
-        <a href="${settings.PLATFORM_LINKEDIN_URL}" title="${_("LinkedIn")}">
+        <a href="${settings.PLATFORM_LINKEDIN_URL}" title="${_("LinkedIn")}" rel="noreferrer">
           <i class="icon fa fa-linkedin element-invisible"></i>
           <span class="copy">${_("LinkedIn")}</span>
         </a>
         ## Translators: This is the website name of plus.google.com. Please
         ## translate this the way that Google+ advertises in your language.
-        <a href="${settings.PLATFORM_GOOGLE_PLUS_URL}" title="${_("Google+")}">
+        <a href="${settings.PLATFORM_GOOGLE_PLUS_URL}" title="${_("Google+")}" rel="noreferrer">
           <i class="icon fa fa-google-plus element-invisible"></i>
           <span class="copy">${_("Google+")}</span>
         </a>
@@ -113,3 +112,6 @@ <h2 class="footer-nav-title">${_("Mobile Apps")}</h2>
     </div>
   </footer>
 </div>
+
+<script type="text/javascript" src="/static/js/vendor/noreferrer.js" charset="utf-8"></script>
+