Merge pull request #2047 from OpenTechFund/enhancement/add_rel_noopener_noreferrer_to_target_blank

Add rel noopener noreferrer to all none local links with target blank.

hypha/apply/funds/templates/funds/application_base.html

@@ -32,7 +32,7 @@
         <h3>{% blocktrans %}Sorry this {{ page|verbose_name }} is not accepting applications at the moment{% endblocktrans %}</h3>
     {% else%}
         {% if page.get_parent.specific.guide_link %}
-            <a href="{{ page.get_parent.specific.guide_link }}" class="link link--fixed-apply" target="_blank">
+            <a href="{{ page.get_parent.specific.guide_link }}" class="link link--fixed-apply" target="_blank" rel="noopener noreferrer">
                 {% trans "Application guide" %}
             </a>
         {% endif %}

hypha/apply/stream_forms/templates/stream_forms/includes/file_field.html

-<a class="link link--download" href="{{ file.url }}" target="_blank">
+<a class="link link--download" href="{{ file.url }}" target="_blank" rel="noopener noreferrer">
     <div>
         <svg><use xlink:href="#file"></use></svg>
         <span>{{ file.filename }}</span>

hypha/apply/templates/forms/includes/field.html

@@ -25,7 +25,7 @@
     {% endif %}
 
     {% if field.field.help_link %}
-        <p class="form__help-link"><a href="{{ field.field.help_link }}" target="_blank">See help guide for more information.<svg class="form__open-icon"><use xlink:href="#open-in-new-tab"></use></svg></a></p>
+        <p class="form__help-link"><a href="{{ field.field.help_link }}" target="_blank" rel="noopener noreferrer">See help guide for more information.<svg class="form__open-icon"><use xlink:href="#open-in-new-tab"></use></svg></a></p>
     {% endif %}
 
     <div class="form__item">

hypha/static_src/src/javascript/apply/application-form-links-new-window.js

@@ -3,6 +3,9 @@
     'use strict';
 
     // Make links on application forms open in a new window/tab.
-    $('.application-form').find('a').attr('target', '_blank');
+    $('.application-form').find('a').attr({
+        target: '_blank',
+        rel: 'noopener noreferrer'
+    });
 
 })(jQuery);