From b750c9ccc511cc08a1cf748dfb5e826a509fa612 Mon Sep 17 00:00:00 2001
From: Jonathan Lloyd <jonathan@thisisjonathan.com>
Date: Fri, 21 Dec 2018 11:15:44 +0000
Subject: [PATCH] Fix tabnabbing vulnerability in Snow theme

Fixes #2438
---
 themes/snow.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/themes/snow.js b/themes/snow.js
index eca4a9287c..6284bd1909 100644
--- a/themes/snow.js
+++ b/themes/snow.js
@@ -70,7 +70,7 @@ class SnowTooltip extends BaseTooltip {
   }
 }
 SnowTooltip.TEMPLATE = [
-  '<a class="ql-preview" target="_blank" href="about:blank"></a>',
+  '<a class="ql-preview" rel="noopener noreferrer nofollow" target="_blank" href="about:blank"></a>',
   '<input type="text" data-formula="e=mc^2" data-link="https://quilljs.com" data-video="Embed URL">',
   '<a class="ql-action"></a>',
   '<a class="ql-remove"></a>',