add security attributes to IxoLink

ixocreate · Apr 19, 2021 · da9bdc6 · da9bdc6
1 parent 2223d1f
commit da9bdc6
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/src/Type/Html/IxoLink.php b/src/Type/Html/IxoLink.php
@@ -76,7 +76,14 @@ public function html(): string
         /** @var LinkType $link */
         $link = Type::create($link['ixolink'], LinkType::serviceName());
 
-        return \sprintf('<a href="%s" target="%s">%s</a>', (string) $link, $link->target(), $this->insert->html());
+        $attr = [
+            'href="' . (string)$link . '"',
+            'target="' . $link->target() . '"',
+        ];
+        if ($link->target() === '_blank') {
+            $attr[] = 'rel="noopener noreferrer"';
+        }
+        return '<a ' . \implode(' ', $attr) . '>' . $this->insert->html() . '</a>';
     }
 
     /**