From 7d35b6e44f3770c0286403f2d16d5d578dc861d3 Mon Sep 17 00:00:00 2001
From: Omar Roth <omarroth@hotmail.com>
Date: Sat, 29 Sep 2018 09:43:39 -0500
Subject: [PATCH] Add rel="noopener" to target="_blank" links

---
 src/invidious/views/data_control.ecr | 2 +-
 src/invidious/views/watch.ecr        | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/invidious/views/data_control.ecr b/src/invidious/views/data_control.ecr
index a710b8fd..0efcba28 100644
--- a/src/invidious/views/data_control.ecr
+++ b/src/invidious/views/data_control.ecr
@@ -13,7 +13,7 @@
             </div>
 
             <div class="pure-control-group">
-                <label for="import_youtube">Import <a target="_blank"
+                <label for="import_youtube">Import <a rel="noopener" target="_blank"
                         href="https://support.google.com/youtube/answer/6224202?hl=en-GB">YouTube subscriptions</a></label>
                 <input type="file" id="import_youtube" name="import_youtube">
             </div>
diff --git a/src/invidious/views/watch.ecr b/src/invidious/views/watch.ecr
index 2b01fa83..4fdbbb56 100644
--- a/src/invidious/views/watch.ecr
+++ b/src/invidious/views/watch.ecr
@@ -218,7 +218,7 @@ function get_reddit_comments() {
                     {title} \
                 </h3> \
                 <b> \
-                    <a target="_blank" href="https://reddit.com{permalink}">View more comments on Reddit</a> \
+                    <a rel="noopener" target="_blank" href="https://reddit.com{permalink}">View more comments on Reddit</a> \
                 </b> \
             </div> \
             <div>{contentHtml}</div> \