Issue #160 fixed

buildNumber.json

@@ -1 +1 @@
-{ "buildNumber" : "00059"}
+{ "buildNumber" : "00073"}

src/printMap/PrintFactory.js

@@ -67,6 +67,7 @@ import { theConfig } from '../data/Config.js';
 import { theTranslator } from '../UI/Translator.js';
 import { theLayersToolbarUI } from '../UI/LayersToolbarUI.js';
 import { theAPIKeysManager } from '../core/APIKeysManager.js';
+import { theHTMLSanitizer } from '../util/HTMLSanitizer.js';
 import { ZERO, TWO, LAT, LNG } from '../util/Constants.js';
 
 const OUR_TILE_SIZE = 256;
@@ -514,12 +515,13 @@ function ourNewPrintFactory ( ) {
 			leafletLayer = window.L.tileLayer.wms ( url, layer.wmsOptions );
 		}
 
-		leafletLayer.options.attribution =
+		leafletLayer.options.attribution = theHTMLSanitizer.sanitizeToHtmlString (
 			' © <a href="https://www.openstreetmap.org/copyright" target="_blank" ' +
 			'title="OpenStreetMap contributors">OpenStreetMap contributors</a> ' +
 			layer.attribution +
 			'| © <a href="https://github.com/wwwouaiebe" target="_blank" ' +
-			'title="https://github.com/wwwouaiebe">Travel & Notes</a> ';
+			'title="https://github.com/wwwouaiebe">Travel & Notes</a> '
+		).htmlString;
 
 		return leafletLayer;
 	}

src/util/HTMLElementsFactory.js

@@ -69,6 +69,9 @@ function ourAddProperties ( element, properties ) {
 			}
 		}
 	}
+	if ( element.target ) {
+		element.rel = 'noopener noreferrer';
+	}
 }
 
 /**

src/util/HTMLSanitizer.js

@@ -350,6 +350,9 @@ function ourSanitizeToHtmlElement ( htmlString, targetNode ) {
 						}
 					);
 				}
+				if ( currentNode.hasAttribute ( 'target' ) ) {
+					newChildNode.setAttribute ( 'rel', 'noopener noreferrer' );
+				}
 				newNode.appendChild ( newChildNode );
 				cloneNode ( currentNode, newChildNode );
 			}
@@ -400,6 +403,9 @@ function ourSanitizeToHtmlString ( htmlString ) {
 				);
 				let isSvg = ( 'svg' === nodeName || 'text' === nodeName || 'polyline' === nodeName );
 				targetString += '<' + nodeName;
+				if ( currentNode.hasAttribute ( 'target' ) ) {
+					targetString += ' rel="noopener noreferrer"';
+				}
 				validAttributesNames.forEach (
 					validAttributeName => {
 						if ( isSvg ) {