Skip to content

Commit dc48baf

Browse files
authored
fix: added security attributes to external links
- Added rel="noopener noreferrer" to video configuration link - Prevented potential tab nabbing attacks
1 parent ff5941f commit dc48baf

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

src/pretix/eventyay_common/templates/eventyay_common/event/fragment_dashboard.html

+1-1
Original file line numberDiff line numberDiff line change
@@ -61,7 +61,7 @@ <h3 class="panel-title">
6161
</p>
6262
{% if is_video_enabled %}
6363
<p>
64-
{% trans "Go to" %} <a href="{% url 'eventyay_common:event.create_access_to_video' organizer=request.organizer.slug event=request.event.slug %}" target="_blank">{% trans "Video Configuration" %}</a>
64+
{% trans "Go to" %} <a href="{% url 'eventyay_common:event.create_access_to_video' organizer=request.organizer.slug event=request.event.slug %}" target="_blank" rel="noopener noreferrer">{% trans "Video Configuration" %}</a>
6565
</p>
6666
{% else %}
6767
<p>

0 commit comments

Comments
 (0)