Open external links safely in new tab

italia · Jul 19, 2020 · 498d914 · 498d914
1 parent 25fcdaa
commit 498d914
Show file tree

Hide file tree

Showing 14 changed files with 47 additions and 42 deletions.
diff --git a/_includes/banner-discuss.html b/_includes/banner-discuss.html
@@ -11,7 +11,8 @@ <h1>{{t.participate}}</h1>
         <div class="row row-eq-height">
             {% for tool in site.data.tools[active_lang] %}
             <div class="col-sm col-md-6 col-lg-3 my-3 mb-md-4 my-md-0 px-3">
-                <a target="_blank" href="{{ tool.url }}" class="decoration-none" title="{{ tool.title }}">
+                <a href="{{ tool.url }}" target="_blank" rel="noopener noreferrer" class="decoration-none"
+                  title="{{ tool.title }}">
                     <article class="d-flex flex-column align-items-start h-100 bg-white p-2 p-4 ">
                         <figure class="d-flex w-100 align-items-center">
                             <img src="{{ tool.img | relative_url}}" alt="{{ tool.alt }}" height="32">

diff --git a/_includes/banner-joinus.html b/_includes/banner-joinus.html
@@ -8,11 +8,11 @@ <h2>{{t.banner_joinus_h2}}</h2>
         <h1>{{t.banner_joinus_h1}}</h1>
       </div>
       <div class="ml-auto">
-        <a href="https://slack.developers.italia.it/"
+        <a href="https://slack.developers.italia.it/" target="_blank" rel="noopener noreferrer"
           class="btn btn-primary pl-5 pr-5 mt-1 mt-md-4">{{t.banner_joinus_action}} <span
             class="icon it-comment"></span></a>
       </div>
     </div>
 
   </div>
-</section>
+</section>
diff --git a/_includes/banner-newsletter.html b/_includes/banner-newsletter.html
@@ -39,7 +39,8 @@ <h1 class="mb-2 mb-md-4" name="newsletter">Newsletter</h1>
                 </div>
                 <div class="row mw-md-50">
                     {% assign privacy_policy_url = newsletterdata.privacy_policy | default: "https://developers.italia.it/it/privacy-policy" %}
-                    <a target="_blank" class="ml-1 text-white font-weight-bold" href="{{ privacy_policy_url }}">Privacy
+                    <a href="{{ privacy_policy_url }}" target="_blank" rel="noopener noreferrer"
+                      class="ml-1 text-white font-weight-bold">Privacy
                         Policy</a>
                 </div>
 
@@ -55,4 +56,4 @@ <h1 class="mb-2 mb-md-4" name="newsletter">Newsletter</h1>
     </div>
 
 
-</section>
+</section>
diff --git a/_includes/community-leaders.html b/_includes/community-leaders.html
@@ -26,7 +26,8 @@
 
     <div class="credits-communityleader col-sm-4">
         <div class="credits-communityleader-img">
-            <a href="{{ member.html_url }}"><img src="{{ member.avatar_url }}" width="130" class="img-fluid"></a>
+          <a href="{{ member.html_url }}" target="_blank" rel="noopener noreferrer"><img src="{{ member.avatar_url }}"
+             width="130" class="img-fluid"></a>
         </div>
         <div class="credits-communityleader-info">
             <div class="credits-communityleader-name">
@@ -39,4 +40,4 @@
     </div>
     {% endfor %}
     {% endfor %}
-</div>
+</div>
diff --git a/_includes/community.html b/_includes/community.html
@@ -1,5 +1,5 @@
 <div class="community-members">
     {% for member in site.data.github_members | sort: "login" %}
-    <a href="{{ member.html_url }}"><img src="{{ member.avatar_url }}" /></a>
+    <a href="{{ member.html_url }}" target="_blank" rel="noopener noreferrer"><img src="{{ member.avatar_url }}" /></a>
     {% endfor %}
-</div>
+</div>
diff --git a/_includes/footer--simple.html b/_includes/footer--simple.html
@@ -18,14 +18,14 @@
         <p class="d-block d-md-none mt-2 footer-collaboration-with small">
           {{ site.data.l10n.[active_lang].t.project_of }}</p>
         <div>
-          <a href="https://www.agid.gov.it/"><img class=""
+          <a href="https://www.agid.gov.it/" target="_blank" rel="noopener noreferrer"><img class=""
               src="{{ site.owner_logo | d('//placehold.it/75x80?text=placeholder') }}" alt="AgID"></a>
         </div>
       </div>
       <div class="footer-team align-items-center col-md-4 py-2 px-3 p-md-0">
         <p class="d-block d-md-none mt-2 footer-collaboration-with small">
           {{ site.data.l10n.[active_lang].t.in_collaboration_with }}</p>
-        <a href="https://teamdigitale.governo.it/">
+        <a href="https://teamdigitale.governo.it/" target="_blank" rel="noopener noreferrer">
           <div class="d-flex">
             <div class="d-flex">
               <img class="" src="{{ site.gov_logo | d('//placehold.it/75x80?text=placeholder') }}" alt="">
@@ -41,7 +41,8 @@
         <span class="text-white small mr-3 ">{{ t.follow_us | capitalize }}</span>
         <ul class="d-inline-block footer-social-icons list-inline mt-2 mt-md-3">
           {% for social in site.data.social %}
-          <li class="list-inline-item"><a href="{{ social[1].link }}" title="{{ social[1].name }}"
+          <li class="list-inline-item"><a href="{{ social[1].link }}" target="_blank" rel="noopener noreferrer"
+             title="{{ social[1].name }}"
               class="text-white"><span class="it-{{ social[0] }}"></span>
               <span class="sr-only">{{ social[1].name | capitalize }}</span></a></li>
           {% endfor %}

diff --git a/_includes/github_team_members.html b/_includes/github_team_members.html
@@ -17,11 +17,11 @@ <h6 class="mb-3">{{  t.project_leader }} </h6>
 					{% endif %}
 
 					<li class="d-flex project__leaders__item mb-3">
-						<a href="{{member.html_url}}" title="{{member.login}}" target="_blank"><img width="50"
-								src="{{member.avatar_url}}"></a>
+						<a href="{{member.html_url}}" title="{{member.login}}" target="_blank" rel="noopener noreferrer">
+							<img width="50" src="{{member.avatar_url}}">
+						</a>
 						<div class="ml-2 d-flex">
-							<a href="{{member.html_url}}" title="{{member.login}}" target="_blank"
-								class="align-self-center">{{member.name | default: member.login}}</a>
+							<a href="{{member.html_url}}" title="{{member.login}}" target="_blank" rel="noopener noreferrer" class="align-self-center">{{member.name | default: member.login}}</a>
 						</div>
 					</li>
 
@@ -53,4 +53,4 @@ <h6 class="mb-3">{{  t.project_leader }} </h6>
 
 </div>
 {% endif %}
-{% endif %}
+{% endif %}
diff --git a/_includes/header-pa.html b/_includes/header-pa.html
@@ -5,7 +5,7 @@
     <div class="Header-owner Headroom-hideme u-flex u-flexJustifyBetween u-flexAlignItemsCenter">
       <div class="Header-owner__institutions container d-flex flex-row px-4 px-md-0">
         <div class="d-block">
-          <a href="{{ site.owner_link }}" class="py-2 d-inline-block">
+          <a href="{{ site.owner_link }}" target="_blank" rel="noopener noreferrer" class="py-2 d-inline-block">
             <span class="d-inline-block d-md-none d-lg-none white-color">
               {{ site.owner_short }}
             </span>
@@ -14,7 +14,7 @@
             </span>
           </a>
           <span class="white-color py-2 d-inline-block">&nbsp;+&nbsp;</span>
-          <a href="{{ site.partner_link }}" class="py-2 d-inline-block">
+          <a href="{{ site.partner_link }}" target="_blank" rel="noopener noreferrer" class="py-2 d-inline-block">
             <span class="d-inline-block d-md-none d-lg-none  white-color">
               {{ site.partner_short }}
             </span>

diff --git a/_includes/header.html b/_includes/header.html
@@ -6,7 +6,7 @@
       <div class="Header-owner__institutions container d-flex flex-row px-4 px-md-0">
 
         <div class="d-block">
-          <a href="{{ site.owner_link }}" class="py-2 d-inline-block">
+          <a href="{{ site.owner_link }}" target="_blank" rel="noopener noreferrer" class="py-2 d-inline-block">
             <span class="d-inline-block d-md-none d-lg-none white-color">
               {{ site.owner_short }}
             </span>
@@ -15,7 +15,7 @@
             </span>
           </a>
           <span class="white-color py-2 d-inline-block">&nbsp;+&nbsp;</span>
-          <a href="{{ site.partner_link }}" class="py-2 d-inline-block">
+          <a href="{{ site.partner_link }}" target="_blank" rel="noopener noreferrer" class="py-2 d-inline-block">
             <span class="d-inline-block d-md-none d-lg-none  white-color">
               {{ site.partner_short }}
             </span>
@@ -71,7 +71,7 @@ <h1 class="Header-titleLink">
           <span class="text-white mr-3">{{ t.follow_us | capitalize }}</span>
           <ul class="Header-socialIcons d-inline-block list-inline mb-0">
             {% for social in site.data.social %}
-            <li class="list-inline-item"><a href="{{ social[1].link }}" title="{{ social[1].name }}"><span
+            <li class="list-inline-item"><a href="{{ social[1].link }}" target="_blank" rel="noopener noreferrer" title="{{ social[1].name }}"><span
                   class="it-{{ social[0] }} icon"></span></a></li>
             {% endfor %}
           </ul>
@@ -87,4 +87,4 @@ <h1 class="Header-titleLink">
   </div>
   <!-- Header-navbar -->
 
-</header>
+</header>
diff --git a/_includes/network-links-menu.html b/_includes/network-links-menu.html
@@ -8,7 +8,7 @@
     {% assign link = item | last%}
     <li class="{{liclass}} {{link.class}} {% if forloop.first %}first-delimiter{%endif%}" >
         {% if link.url %}
-        <a target="_blank" href="{{link.url}}">{{t[link.title]}}</a>
+        <a href="{{link.url}}" target="_blank" rel="noopener noreferrer">{{t[link.title]}}</a>
         {% else %}
         <span>{{t[link.title]}}</span>
         {% endif %}

diff --git a/_includes/person.html b/_includes/person.html
@@ -32,7 +32,7 @@
       <ul class="list-inline ">
         {% for contact in p.contacts %}
         <li class="list-inline-item">
-          <a href="{{ contact[1].link }}">
+           <a href="{{ contact[1].link }}" target="_blank" rel="noopener noreferrer">
             <span class="icon it-{{ contact[0] }}"></span>
             <span class="sr-only">{{ contact[1].name }}</span>
           </a>
@@ -44,4 +44,4 @@
   </div>
 
 </div>
-<!--/credits-person-->
+<!--/credits-person-->
diff --git a/_includes/platform-resources.html b/_includes/platform-resources.html
@@ -31,7 +31,8 @@
                            </svg>
                         </span>
                         {% endif %}
-                        <a href="{{item.url}}" class="d-block project__resources-itemtitle">{{item.title}}</a>
+                        <a href="{{item.url}}" target="_blank"
+                          rel="noopener noreferrer" class="d-block project__resources-itemtitle">{{item.title}}</a>
                         <p>{{item.desc}}</p>
                     </li>
                     {% endfor %}

diff --git a/_layouts/platform.html b/_layouts/platform.html
@@ -34,7 +34,7 @@ <h2 class="d-inline h1">{{ page.subtitle }}</h2>
             <span class="d-block">{{t.project_owner}}</span>
             <ul class="list-unstyled">
               {% for owner in page.owners %}
-              <li><a href="{{owner.url}}">{{owner.name}}</a></li>
+              <li><a href="{{owner.url}}" target="_blank" rel="noopener noreferrer">{{owner.name}}</a></li>
               {% endfor %}
             </ul>
           </div>
@@ -44,7 +44,7 @@ <h2 class="d-inline h1">{{ page.subtitle }}</h2>
             <span class="d-block">{{t.project_manager}}</span>
             <ul class="list-unstyled">
               {% for manager in page.managers %}
-              <li><a href="{{manager.url}}">{{manager.name}}</a></li>
+              <li><a href="{{manager.url}}" target="_blank" rel="noopener noreferrer">{{manager.name}}</a></li>
               {% endfor %}
             </ul>
           </div>
@@ -95,4 +95,4 @@ <h2>{{t.project_risorse}}</h2>
   </div>
 </section>
 
-{% include platform-apis.html %}
+{% include platform-apis.html %}
diff --git a/_layouts/software-details.html b/_layouts/software-details.html
@@ -126,17 +126,17 @@ <h3 class="color-content font-serif my-2 my-md-4">
         </div>
         {% if description.documentation != null and description.documentation != "" %}
         <div class="goto doc">
-          <p><a href="{{ description.documentation }}"><img src="/assets/icons/software_icons/it-documentazione.svg">{{
+          <p><a href="{{ description.documentation }}" target="_blank" rel="noopener noreferrer"><img src="/assets/icons/software_icons/it-documentazione.svg">{{
             t.software.goToDocumentation }} &rarr;</a></p>
         </div>
         {% endif %}
         <div class="goto code">
-          <p><a href="{{ page.publiccode.url }}"> <img src="/assets/icons/software_icons/it-codice.svg">{{
+          <p><a href="{{ page.publiccode.url }}" target="_blank" rel="noopener noreferrer"> <img src="/assets/icons/software_icons/it-codice.svg">{{
             t.software.goToCode }} &rarr;</a></p>
         </div>
         {% if page.publiccode.roadmap != null and page.publiccode.roadmap != "" %}
         <div class="goto road">
-          <p><a href="{{ page.publiccode.roadmap }}"><img src="/assets/icons/software_icons/it-roadmap.svg">{{
+          <p><a href="{{ page.publiccode.roadmap }}" target="_blank" rel="noopener noreferrer"><img src="/assets/icons/software_icons/it-roadmap.svg">{{
             t.software.goToRoadmap }} &rarr;</a></p>
         </div>
         {% endif %}
@@ -513,7 +513,7 @@ <h2>
                   {% break %}
                   {% endif %}
                   {% endfor %}
-                  {% if all_false %} 
+                  {% if all_false %}
                   {{ t.software.dependencies_none }}
                   {% else %}
                       {% if p.pagopa == true %}
@@ -550,25 +550,25 @@ <h2>
                   {% break %}
                   {% endif %}
                   {% endfor %}
-                  {% if all_false %} 
+                  {% if all_false %}
                   {{ t.software.dependencies_none }}
                   {% else %}
                   {% if p.gdpr == true %}
-                    GDPR 
+                    GDPR
                   {% endif %}
                   {% if p.lineeGuidaDesign == true %}
-                  <a href="{{ t.software.design_guidelines_url }}" class="enabling_platforms">
-                    {{ t.software.design_guidelines }} 
+                  <a href="{{ t.software.design_guidelines_url }}" target="_blank" rel="noopener noreferrer" class="enabling_platforms">
+                    {{ t.software.design_guidelines }}
                   </a>
                   {% endif %}
                   {% if p.misureMinimeSicurezza == true %}
-                  <a href="{{ t.software.security_guidelines_url }}" class="enabling_platforms">
+                  <a href="{{ t.software.security_guidelines_url }}" target="_blank" rel="noopener noreferrer" class="enabling_platforms">
                     {{ t.software.security_guidelines }}
                   </a>
                   {% endif %}
                   {% if p.modelloInteroperabilita == true %}
-                  <a href="{{ t.software.interoperability_model_url }}" class="enabling_platforms">
-                    {{ t.software.interoperability_model }} 
+                  <a href="{{ t.software.interoperability_model_url }}" target="_blank" rel="noopener noreferrer" class="enabling_platforms">
+                    {{ t.software.interoperability_model }}
                   </a>
                   {% endif %}
                   {% endif %}
@@ -614,7 +614,7 @@ <h2>
               {% if description.apiDocumentation != nil and description.apiDocumentation != "" %}
               <div class="other-detail">
                 <p><span class="label">{{ t.software.api_documentation }}</span>
-                  <a href="{{ description.apiDocumentation }}">{{ sw_name }} API</a>
+                  <a href="{{ description.apiDocumentation }}" target="_blank" rel="noopener noreferrer">{{ sw_name }} API</a>
                 </p>
               </div>
               {% endif %}