cheap fix for target="_blank" vulnerability

MediaMath · May 5, 2016 · a90b68f · a90b68f
1 parent 0586801
commit a90b68f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/strand-action/strand-action.html b/src/strand-action/strand-action.html
@@ -14,7 +14,7 @@
 <dom-module id="strand-action">
 	<link rel="import" type="css" href="strand-action.css"/>
 	<template>
-		<a href="{{href}}" target="{{target}}" class$="{{ updateClass(underline) }}">
+		<a href="{{href}}" target="{{target}}" rel="noopener noreferrer" class$="{{ updateClass(underline) }}">
 			<content select="strand-icon" id="icon"></content>
 			<content select="label"></content>
 		</a>