Add noopener and noreferer to links in user generated content

tomhughes · Jan 9, 2019 · 5feb6ba · 5feb6ba
1 parent 1d37d1a
commit 5feb6ba
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/config/initializers/sanitize.rb b/config/initializers/sanitize.rb
@@ -1,5 +1,5 @@
 Sanitize::Config::OSM = Sanitize::Config::RELAXED.dup
 
 Sanitize::Config::OSM[:elements] -= %w[div style]
-Sanitize::Config::OSM[:add_attributes] = { "a" => { "rel" => "nofollow" } }
+Sanitize::Config::OSM[:add_attributes] = { "a" => { "rel" => "nofollow noopener noreferer" } }
 Sanitize::Config::OSM[:remove_contents] = %w[script style]