[Privacy] don't send shiori link to the website owner

go-shiori · Dec 25, 2023 · 3531e20 · 3531e20
1 parent 188ce68
commit 3531e20
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 4 deletions.
diff --git a/internal/view/assets/js/component/bookmark.js b/internal/view/assets/js/component/bookmark.js
@@ -4,7 +4,7 @@ var template = `
 		v-if="editMode" 
 		@click="selectBookmark">
 	</a>
-	<a class="bookmark-link" :href="mainURL" target="_blank" rel="noopener">
+	<a class="bookmark-link" :href="mainURL" target="_blank" rel="noopener noreferrer">
 		<span class="thumbnail" v-if="thumbnailVisible" :style="thumbnailStyleURL"></span>
 		<p class="title" dir="auto">{{title}}
 			<i v-if="hasContent" class="fas fa-file-alt"></i>
@@ -19,7 +19,7 @@ var template = `
 	</div>
 	<div class="spacer"></div>
 	<div class="bookmark-menu">
-		<a class="url" :href="url" target="_blank" rel="noopener">
+		<a class="url" :href="url" target="_blank" rel="noopener noreferrer">
 			{{hostnameURL}}
 		</a>
 		<template v-if="!editMode && menuVisible">

diff --git a/internal/view/content.html b/internal/view/content.html
@@ -26,7 +26,7 @@
 			<p id="metadata" v-cloak>Added {{localtime()}}</p>
 			<p id="title" dir="auto">$$.Book.Title$$</p>
 			<div id="links">
-				<a href="$$.Book.URL$$" target="_blank" rel="noopener">View Original</a>
+				<a href="$$.Book.URL$$" target="_blank" rel="noopener noreferrer">View Original</a>
 				$$if .Book.HasArchive$$
 				<a href="bookmark/$$.Book.ID$$/archive">View Archive</a>
 				$$end$$

diff --git a/internal/webserver/handler.go b/internal/webserver/handler.go
@@ -75,7 +75,7 @@ func (h *Handler) PrepareTemplates() error {
 		`<div id="shiori-archive-header">
 		<p id="shiori-logo"><span>栞</span>shiori</p>
 		<div class="spacer"></div>
-		<a href="$$.URL$$" target="_blank">View Original</a>
+		<a href="$$.URL$$" target="_blank" rel="noopener noreferrer">View Original</a>
 		$$if .HasContent$$
 		<a href="/bookmark/$$.ID$$/content">View Readable</a>
 		$$end$$