From 7600d9c1699a0ce577fc2b1d494e7fc19824f8a0 Mon Sep 17 00:00:00 2001
From: Jeff Abshire <jabshire@imdb.com>
Date: Fri, 8 Nov 2019 12:27:37 -0800
Subject: [PATCH] Remove a potential tabnabbing attack in a template. (#13024)

My company's security scanner picked up on a potential problem in this
template in our deployed Mattermost instance.

https://www.owasp.org/index.php/Reverse_Tabnabbing
---
 templates/unsupported_browser.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/unsupported_browser.html b/templates/unsupported_browser.html
index dc901b7e0a..53e81baed9 100644
--- a/templates/unsupported_browser.html
+++ b/templates/unsupported_browser.html
@@ -292,7 +292,7 @@
                         {{template "unsupported_browser-system_browser" .Props.SystemBrowser}}
                     {{end}}
                     <div class='learn-more-about-sup'>
-                        <a href='https://docs.mattermost.com/install/requirements.html#pc-web' target='_blank'>{{.Props.LearnMoreString}}</a>
+                        <a href='https://docs.mattermost.com/install/requirements.html#pc-web' target='_blank' rel='noopener noreferrer'>{{.Props.LearnMoreString}}</a>
                     </div>
                 </div>
             </div>