[Privacy] don't send shiori link to the website owner

go-shiori · Dec 25, 2023 · 2ee36ff · 2ee36ff
1 parent 56dc1ff
commit 2ee36ff
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/internal/view/assets/js/component/bookmark.js b/internal/view/assets/js/component/bookmark.js
@@ -19,7 +19,7 @@ var template = `
 	</div>
 	<div class="spacer"></div>
 	<div class="bookmark-menu">
-		<a class="url" :href="url" target="_blank" rel="noopener">
+		<a class="url" :href="url" target="_blank" rel="noopener noreferrer">
 			{{hostnameURL}}
 		</a>
 		<template v-if="!editMode && menuVisible">

diff --git a/internal/view/content.html b/internal/view/content.html
@@ -26,7 +26,7 @@
 			<p id="metadata" v-cloak>Added {{localtime()}}</p>
 			<p id="title" dir="auto">$$.Book.Title$$</p>
 			<div id="links">
-				<a href="$$.Book.URL$$" target="_blank" rel="noopener">View Original</a>
+				<a href="$$.Book.URL$$" target="_blank" rel="noopener noreferrer">View Original</a>
 				$$if .Book.HasArchive$$
 				<a href="bookmark/$$.Book.ID$$/archive">View Archive</a>
 				$$end$$

diff --git a/internal/webserver/handler.go b/internal/webserver/handler.go
@@ -75,7 +75,7 @@ func (h *Handler) PrepareTemplates() error {
 		`<div id="shiori-archive-header">
 		<p id="shiori-logo"><span>栞</span>shiori</p>
 		<div class="spacer"></div>
-		<a href="$$.URL$$" target="_blank">View Original</a>
+		<a href="$$.URL$$" target="_blank" rel="noopener noreferrer">View Original</a>
 		$$if .HasContent$$
 		<a href="/bookmark/$$.ID$$/content">View Readable</a>
 		$$end$$