search

chingu-x / chingu-frontend

React / Apollo client for the Chingu Developer Network
10 stars 7 forks source link

Security risk in HTML anchor elements (`<a>`) #192

Closed jdmedlock closed 5 years ago

jdmedlock commented 5 years ago

Some frontend components are using anchor tags flagged with the following security risk:

Using target="_blank" without rel="noopener noreferrer" is a security risk: see https://mathiasbynens.github.io/rel-noopener  react/jsx-no-target-blank

These components are:

./src/components/UserProfile/UserSideBar.jsx
./src/components/ProjectShowcase/components/ExternalLinks.jsx
./src/components/Ticketbox/components/Success.jsx
./src/components/FeedPortal/components/GithubActivity.jsx
jdmedlock commented 5 years ago

Updated components to remediate this vulnerability