Use rel=noopener for _blank anchors (#7914)

mapbox · Feb 18, 2019 · c58b24c · c58b24c
1 parent 0a1aeda
commit c58b24c
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/src/ui/control/attribution_control.js b/src/ui/control/attribution_control.js
@@ -104,6 +104,7 @@ class AttributionControl {
                 return acc;
             }, `?`);
             editLink.href = `${config.FEEDBACK_URL}/${paramString}${this._map._hash ? this._map._hash.getHashString(true) : ''}`;
+            editLink.rel = "noopener";
         }
     }
 

diff --git a/src/ui/control/logo_control.js b/src/ui/control/logo_control.js
@@ -29,6 +29,7 @@ class LogoControl {
         this._container = DOM.create('div', 'mapboxgl-ctrl');
         const anchor = DOM.create('a', 'mapboxgl-ctrl-logo');
         anchor.target = "_blank";
+        anchor.rel = "noopener";
         anchor.href = "https://www.mapbox.com/";
         anchor.setAttribute("aria-label", "Mapbox logo");
         anchor.setAttribute("rel", "noopener");