[diffoscope] 01/01: Disable referrer and window.opener leakage

Emanuel Bronshtein e3amn2l-guest at moszumanska.debian.org
Tue Dec 20 21:24:48 CET 2016


This is an automated email from the git hooks/post-receive script.

e3amn2l-guest pushed a commit to branch master
in repository diffoscope.

commit 53cfc936d2cb98fa5f7b284c872dbf85656b7f25
Author: Emanuel Bronshtein <e3amn2l at gmx.com>
Date:   Tue Dec 20 22:24:45 2016 +0200

    Disable referrer and window.opener leakage
---
 diffoscope/presenters/html.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/diffoscope/presenters/html.py b/diffoscope/presenters/html.py
index daa468e..da5b508 100644
--- a/diffoscope/presenters/html.py
+++ b/diffoscope/presenters/html.py
@@ -61,6 +61,7 @@ HEADER = """<!DOCTYPE html>
 <html>
 <head>
   <meta charset="utf-8" />
+  <meta name="referrer" content="no-referrer" />
   <meta name="generator" content="diffoscope" />
   <link rel="icon" type="image/png" href="data:image/png;base64,%(favicon)s" />
   <title>%(title)s</title>
@@ -172,7 +173,7 @@ HEADER = """<!DOCTYPE html>
 """
 
 FOOTER = """
-<div class="footer">Generated by <a href="https://diffoscope.org" target="_blank">diffoscope</a> %(version)s</div>
+<div class="footer">Generated by <a href="https://diffoscope.org" rel="noopener noreferrer" target="_blank">diffoscope</a> %(version)s</div>
 </body>
 </html>
 """

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/reproducible/diffoscope.git


More information about the diffoscope mailing list