From 3b8b23218da924b2be91511628fd6d8911bde02d Mon Sep 17 00:00:00 2001
From: Harrison Healey <harrisonmhealey@gmail.com>
Date: Thu, 5 May 2016 14:17:59 -0400
Subject: [PATCH] Added noreferrer to some links (#2897)

---
 webapp/components/header_footer_template.jsx | 4 ++++
 webapp/components/navbar_dropdown.jsx        | 2 ++
 webapp/components/sidebar_right_menu.jsx     | 2 ++
 webapp/utils/markdown.jsx                    | 2 +-
 4 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/webapp/components/header_footer_template.jsx b/webapp/components/header_footer_template.jsx
index 76061d532c..71716c4fb2 100644
--- a/webapp/components/header_footer_template.jsx
+++ b/webapp/components/header_footer_template.jsx
@@ -34,6 +34,7 @@ export default class NotLoggedIn extends React.Component {
                                 className='pull-right footer-link'
                                 target='_blank'
                                 href={global.window.mm_config.HelpLink}
+                                rel='noreferrer'
                             >
                                 <FormattedMessage id='web.footer.help'/>
                             </a>
@@ -42,6 +43,7 @@ export default class NotLoggedIn extends React.Component {
                                 className='pull-right footer-link'
                                 target='_blank'
                                 href={global.window.mm_config.TermsOfServiceLink}
+                                rel='noreferrer'
                             >
                                 <FormattedMessage id='web.footer.terms'/>
                             </a>
@@ -50,6 +52,7 @@ export default class NotLoggedIn extends React.Component {
                                 className='pull-right footer-link'
                                 target='_blank'
                                 href={global.window.mm_config.PrivacyPolicyLink}
+                                rel='noreferrer'
                             >
                                 <FormattedMessage id='web.footer.privacy'/>
                             </a>
@@ -58,6 +61,7 @@ export default class NotLoggedIn extends React.Component {
                                 className='pull-right footer-link'
                                 target='_blank'
                                 href={global.window.mm_config.AboutLink}
+                                rel='noreferrer'
                             >
                                 <FormattedMessage id='web.footer.about'/>
                             </a>
diff --git a/webapp/components/navbar_dropdown.jsx b/webapp/components/navbar_dropdown.jsx
index 967c5a95cb..7004a0cf35 100644
--- a/webapp/components/navbar_dropdown.jsx
+++ b/webapp/components/navbar_dropdown.jsx
@@ -228,6 +228,7 @@ export default class NavbarDropdown extends React.Component {
                     <Link
                         target='_blank'
                         to={global.window.mm_config.HelpLink}
+                        rel='noreferrer'
                     >
                         <FormattedMessage
                             id='navbar_dropdown.help'
@@ -245,6 +246,7 @@ export default class NavbarDropdown extends React.Component {
                     <Link
                         target='_blank'
                         to={global.window.mm_config.ReportAProblemLink}
+                        rel='noreferrer'
                     >
                         <FormattedMessage
                             id='navbar_dropdown.report'
diff --git a/webapp/components/sidebar_right_menu.jsx b/webapp/components/sidebar_right_menu.jsx
index eb699d05d6..b574a29a39 100644
--- a/webapp/components/sidebar_right_menu.jsx
+++ b/webapp/components/sidebar_right_menu.jsx
@@ -174,6 +174,7 @@ export default class SidebarRightMenu extends React.Component {
                     <Link
                         target='_blank'
                         to={global.window.mm_config.HelpLink}
+                        rel='noreferrer'
                     >
                         <i className='fa fa-question'></i>
                         <FormattedMessage
@@ -192,6 +193,7 @@ export default class SidebarRightMenu extends React.Component {
                     <Link
                         target='_blank'
                         to={global.window.mm_config.ReportAProblemLink}
+                        rel='noreferrer'
                     >
                         <i className='fa fa-phone'></i>
                         <FormattedMessage
diff --git a/webapp/utils/markdown.jsx b/webapp/utils/markdown.jsx
index fe117274ba..2ddd3fe11b 100644
--- a/webapp/utils/markdown.jsx
+++ b/webapp/utils/markdown.jsx
@@ -142,7 +142,7 @@ class MattermostMarkdownRenderer extends marked.Renderer {
         if (outHref.startsWith(global.location.origin)) {
             output += 'data-link="' + outHref.substring(global.location.origin.length) + '"';
         } else {
-            output += 'href="' + outHref + '" target="_blank"';
+            output += 'href="' + outHref + '" target="_blank" rel="noreferrer"';
         }
 
         if (title) {