Fix the target="_blank" vulnerability

[jdecool]

The application seems to be vulnerable to the target="_blank" vulnerability by example (https://dev.to/ben/the-targetblank-vulnerability-by-example).

I want to make a patch to fix this issue.

I will patch the include/functions2.php file and update the usage of

Code: Select all

window.open

Is it possible to have developer right on the project (my username is the same "jdecool") ?

[fox]

sure

the links are already rewritten with rel=noreferrer so you really only need to update the window.open in javascript, i think