epriestley 05a4c55c52 Explicitly add rel="noreferrer" to all external links ...

Summary: See D19117. Instead of automatically figuring this out inside `phutil_tag()`, explicitly add rel="noreferrer" at the application level to all external links.

Test Plan:
  - Grepped for `_blank`, `isValidRemoteURIForLink`, checked all callsites for user-controlled data.
  - Created a link menu item, verified noreferrer in markup.
  - Created a link custom field, verified no referrer in markup.
  - Verified noreferrer for `{nav href=...}`.

Subscribers: PHID-OPKG-gm6ozazyms6q6i22gyam

Differential Revision: https://secure.phabricator.com/D19118

2018-02-17 17:46:11 -08:00

..

application

Mark "Settings" and "Nuance" as launchable applications

2017-06-01 12:40:25 -07:00

capability

Simplify the implementation of PhabricatorPolicyCapability subclasses

2014-07-25 08:25:42 +10:00

command

Allow Nuance commands to try to apply immediately

2017-05-26 08:36:21 -07:00

conduit

Import raw GitHub event data into Nuance

2016-03-08 12:03:11 -08:00

contentsource

Add a Nuance content source, and make use of it

2016-03-28 12:47:05 -07:00

controller

Allow Nuance commands to try to apply immediately

2017-05-26 08:36:21 -07:00

cursor

Fix a handful of Nuance fatals

2017-05-24 11:02:55 -07:00

editor

Convert Nuance sources to modular transactions

2017-05-22 11:18:23 -07:00

github

Extract GitHub actor IDs from GitHub events

2016-03-28 12:47:21 -07:00

item

Explicitly add rel="noreferrer" to all external links

2018-02-17 17:46:11 -08:00

management

Split the GitHub import cursor into separate repository and issues event importers

2016-03-09 09:27:19 -08:00

phid

Fix a handful of Nuance fatals

2017-05-24 11:02:55 -07:00

query

Issue commands to Nuance items, at least roughly

2017-05-24 11:04:57 -07:00

source

Fix a handful of Nuance fatals

2017-05-24 11:02:55 -07:00

storage

Make throwing things into the trash actually work in Nuance

2017-05-24 11:05:30 -07:00

typeahead

Add very basic routing to Nuance

2015-08-24 09:21:56 -07:00

worker

Allow Nuance commands to try to apply immediately

2017-05-26 08:36:21 -07:00

xaction

Make throwing things into the trash actually work in Nuance

2017-05-24 11:05:30 -07:00