From 7fa072e36f7dd47b6f1f21a786d0f28e735f3f1a Mon Sep 17 00:00:00 2001
From: Miodec <jack@monkeytype.com>
Date: Wed, 18 Jan 2023 00:59:30 +0100
Subject: [PATCH] using noopener on anchors

---
 frontend/src/ts/ready.ts                 | 2 +-
 frontend/static/html/pages/settings.html | 6 +++++-
 frontend/static/html/popups.html         | 6 ++++++
 frontend/static/security-policy.html     | 2 +-
 4 files changed, 13 insertions(+), 3 deletions(-)

diff --git a/frontend/src/ts/ready.ts b/frontend/src/ts/ready.ts
index adf7d7363..2d076cfa0 100644
--- a/frontend/src/ts/ready.ts
+++ b/frontend/src/ts/ready.ts
@@ -43,7 +43,7 @@ $(document).ready(() => {
   }
   if (!window.localStorage.getItem("merchbannerclosed")) {
     Notifications.addBanner(
-      `Check out our merchandise, available at <a target="_blank" href="https://monkeytype.store/">monkeytype.store</a>`,
+      `Check out our merchandise, available at <a target="_blank" rel="noopener" href="https://monkeytype.store/">monkeytype.store</a>`,
       1,
       "./images/merch2.png",
       false,
diff --git a/frontend/static/html/pages/settings.html b/frontend/static/html/pages/settings.html
index 31cf92a8c..4df3cab6d 100644
--- a/frontend/static/html/pages/settings.html
+++ b/frontend/static/html/pages/settings.html
@@ -2417,7 +2417,11 @@
         Generate Ape Keys to access certain API endpoints
         <span style="display: inline-flex">
           (
-          <a href="https://api.monkeytype.com/documentation" target="_blank">
+          <a
+            href="https://api.monkeytype.com/documentation"
+            target="_blank"
+            rel="noopener"
+          >
             documentation
           </a>
           ).&nbsp;
diff --git a/frontend/static/html/popups.html b/frontend/static/html/popups.html
index dab33cbae..149e2fa31 100644
--- a/frontend/static/html/popups.html
+++ b/frontend/static/html/popups.html
@@ -996,6 +996,7 @@
         class="button"
         target="_blank"
         href="mailto:jack@monkeytype.com?subject=[Question] "
+        rel="noopener"
       >
         <div class="icon"><i class="fas fa-question-circle"></i></div>
         <div class="textGroup">
@@ -1007,6 +1008,7 @@
         class="button"
         target="_blank"
         href="mailto:jack@monkeytype.com?subject=[Feedback] "
+        rel="noopener"
       >
         <div class="icon"><i class="fas fa-comment-dots"></i></div>
         <div class="textGroup">
@@ -1018,6 +1020,7 @@
         class="button"
         target="_blank"
         href="mailto:jack@monkeytype.com?subject=[Bug] "
+        rel="noopener"
       >
         <div class="icon"><i class="fas fa-bug"></i></div>
         <div class="textGroup">
@@ -1029,6 +1032,7 @@
         class="button"
         target="_blank"
         href="mailto:jack@monkeytype.com?subject=[Account] "
+        rel="noopener"
       >
         <div class="icon"><i class="fas fa-user-circle"></i></div>
         <div class="textGroup">
@@ -1040,6 +1044,7 @@
         class="button"
         target="_blank"
         href="mailto:jack@monkeytype.com?subject=[Business] "
+        rel="noopener"
       >
         <div class="icon"><i class="fas fa-briefcase"></i></div>
         <div class="textGroup">
@@ -1051,6 +1056,7 @@
         class="button"
         target="_blank"
         href="mailto:jack@monkeytype.com?subject=[Other] "
+        rel="noopener"
       >
         <div class="icon"><i class="fas fa-ellipsis-h"></i></div>
         <div class="textGroup">
diff --git a/frontend/static/security-policy.html b/frontend/static/security-policy.html
index ab398756b..73aaf18f3 100644
--- a/frontend/static/security-policy.html
+++ b/frontend/static/security-policy.html
@@ -136,7 +136,7 @@
           availability of Monkeytype services, please send your disclosure via
           (1)
           <span style="display: inline-flex">
-            <a href="mailto:jack@monkeytype.com">email</a>
+            <a href="mailto:jack@monkeytype.com" rel="noopener">email</a>
             ,
           </span>
           &nbsp;or (2) ping