osr-plastic/osr-discourse-src
Archived
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

SECURITY: Fix tab nabbing.

Browse Source
This commit is contained in:
Dan Ungureanu 2019-04-25 00:34:59 +03:00
parent b264661fe2
commit 2a8118fb44
No known key found for this signature in database
GPG Key ID: 0AA2A00D6ACC8B84
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
app/assets/javascripts/discourse/lib/click-track.js.es6
View File

@ -157,7 +157,9 @@ export default {
});
}
if (openWindow) {
window.open(destUrl, "_blank").focus();
const newWindow = window.open(destUrl, "_blank");
newWindow.opener = null;
newWindow.focus();
} else {
DiscourseURL.routeTo(href);
}
@ -165,7 +167,9 @@ export default {
}
if (openWindow) {
window.open(destUrl, "_blank").focus();
const newWindow = window.open(destUrl, "_blank");
newWindow.opener = null;
newWindow.focus();
} else {
DiscourseURL.redirectTo(destUrl);
}