Fix tabnabbing vulnerability in Snow theme (quilljs#2439)

voxmedia · Sep 21, 2020 · 8b0df73 · 8b0df73
1 parent 635ed27
commit 8b0df73
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/themes/snow.js b/themes/snow.js
@@ -110,7 +110,7 @@ class SnowTooltip extends BaseTooltip {
   }
 }
 SnowTooltip.TEMPLATE = [
-  '<a class="ql-preview" target="_blank" href="about:blank"></a>',
+  '<a class="ql-preview" rel="noopener noreferrer" target="_blank" href="about:blank"></a>',
   '<input type="text" data-formula="e=mc^2" data-link="https://quilljs.com" data-video="Embed URL">',
   '<a class="ql-action"></a>',
   '<a class="ql-remove"></a>'