Changelog for #3201 + build JS stuff for #3202

craftcms · Aug 15, 2018 · fce3cb1 · fce3cb1
1 parent 1f725cc
commit fce3cb1
Show file tree

Hide file tree

Showing 6 changed files with 11 additions and 6 deletions.
diff --git a/CHANGELOG-v3.md b/CHANGELOG-v3.md
@@ -1,5 +1,10 @@
 # Release Notes for Craft CMS 3.x
 
+## Unreleased
+
+### Security
+- External links in the Control Panel now set `rel="noopener"`. ([#3201](https://github.com/craftcms/cms/issues/3201))
+
 ## 3.0.20 - 2018-08-14
 
 ### Added

diff --git a/src/web/assets/cp/dist/js/Craft.js b/src/web/assets/cp/dist/js/Craft.js
@@ -1,4 +1,4 @@
-/*!   - 2018-08-14 */
+/*!   - 2018-08-15 */
 (function($){
 
 /** global: Craft */
@@ -10874,7 +10874,7 @@ Craft.CP = Garnish.Base.extend(
             // hat tip: https://stackoverflow.com/a/2911045/1688568
             $('a').each(function() {
                 if (this.hostname.length && this.hostname !== location.hostname && typeof $(this).attr('target') === 'undefined') {
-                    $(this).attr('target', '_blank')
+                    $(this).attr('rel', 'noopener').attr('target', '_blank')
                 }
             });
         },

diff --git a/src/web/assets/cp/dist/js/Craft.min.js b/src/web/assets/cp/dist/js/Craft.min.js
diff --git a/src/web/assets/cp/dist/js/Craft.min.js.map b/src/web/assets/cp/dist/js/Craft.min.js.map
diff --git a/src/web/assets/pluginstore/dist/js/main.js b/src/web/assets/pluginstore/dist/js/main.js
diff --git a/src/web/assets/pluginstore/dist/js/main.js.map b/src/web/assets/pluginstore/dist/js/main.js.map