Pervent reverse tabnabbing in edx platform

2019-08-22 16:37:44 +05:00
parent 1c4f9da92d
commit 1a4eb7d2e8
61 changed files with 120 additions and 103 deletions
--- a/openedx/core/djangoapps/api_admin/widgets.py
+++ b/openedx/core/djangoapps/api_admin/widgets.py
@@ -34,7 +34,9 @@ class TermsOfServiceCheckboxInput(CheckboxInput):
            u'I, and my organization, accept the {link_start}{platform_name} API Terms of Service{link_end}.'
        )).format(
            platform_name=configuration_helpers.get_value('PLATFORM_NAME', settings.PLATFORM_NAME),
-            link_start=HTML(u'<a href="{url}" target="_blank">').format(url=reverse('api_admin:api-tos')),
+            link_start=HTML(u'<a href="{url}" rel="noopener" target="_blank">').format(
+                url=reverse('api_admin:api-tos')
+            ),
            link_end=HTML('</a>'),
        )