From b57e2915cff164fa1bceb1ba5d4411e6519fce2b Mon Sep 17 00:00:00 2001
From: Miki <miki@amazon.com>
Date: Sun, 9 Oct 2022 11:38:15 -0700
Subject: [PATCH] [Legacy Maps Plugin] Prevent reverse-tabnabbing

Signed-off-by: Miki <miki@amazon.com>
---
 CHANGELOG.md                                       | 2 ++
 src/plugins/maps_legacy/public/map/map_messages.js | 6 +++++-
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0dd139a81baf..6fe498174ec9 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,8 @@ Inspired from [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 
 ### 🛡 Security
 
+* [Legacy Maps Plugin] Prevent reverse-tabnabbing ([#2540](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/2540))
+
 ### 📈 Features/Enhancements
 
 * [MD] Support legacy client for data source ([#2204](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/2204))
diff --git a/src/plugins/maps_legacy/public/map/map_messages.js b/src/plugins/maps_legacy/public/map/map_messages.js
index e87161c1ba1f..c481feeac51e 100644
--- a/src/plugins/maps_legacy/public/map/map_messages.js
+++ b/src/plugins/maps_legacy/public/map/map_messages.js
@@ -112,7 +112,11 @@ export const createZoomWarningMsg = (function () {
               Please go to { wms } for more information."
               values={{
                 wms: (
-                  <a target="_blank" href="https://opensearch.org/docs/latest/dashboards/maptiles/">
+                  <a
+                    target="_blank"
+                    href="https://opensearch.org/docs/latest/dashboards/maptiles/"
+                    rel="noopener noreferrer"
+                  >
                     {`Custom WMS Configuration`}
                   </a>
                 ),