summary refs log tree commit diff
path: root/synapse/static
diff options
context:
space:
mode:
authorNeil Johnson <neil@matrix.org>2019-07-19 12:03:36 +0100
committerRichard van der Hoff <1389908+richvdh@users.noreply.github.com>2019-07-19 12:03:36 +0100
commit5c05ae7ba0c7ec97b84d55efdbc91446361bf9e1 (patch)
treed9a8cbf4380d11caac6e66af0d46250464fa8bd1 /synapse/static
parentUpdate the coding style doc (#5719) (diff)
downloadsynapse-5c05ae7ba0c7ec97b84d55efdbc91446361bf9e1.tar.xz
Add 'rel' attribute to default welcome page. (#5695)
add rel attribute as a precaution against reverse tabnabbing in future
Diffstat (limited to 'synapse/static')
-rw-r--r--synapse/static/index.html4
1 files changed, 2 insertions, 2 deletions
diff --git a/synapse/static/index.html b/synapse/static/index.html
index d3f1c7dce0..bf46df9097 100644
--- a/synapse/static/index.html
+++ b/synapse/static/index.html
@@ -48,13 +48,13 @@
     </div>
     <h1>It works! Synapse is running</h1>
     <p>Your Synapse server is listening on this port and is ready for messages.</p>
-    <p>To use this server you'll need <a href="https://matrix.org/docs/projects/try-matrix-now.html#clients" target="_blank">a Matrix client</a>.
+    <p>To use this server you'll need <a href="https://matrix.org/docs/projects/try-matrix-now.html#clients" target="_blank" rel="noopener noreferrer">a Matrix client</a>.
     </p>
     <p>Welcome to the Matrix universe :)</p>
     <hr>
     <p>
       <small>
-        <a href="https://matrix.org" target="_blank">
+        <a href="https://matrix.org" target="_blank" rel="noopener noreferrer">
           matrix.org
         </a>
       </small>