Deny window.opener to gravatar.com (#1737)

DMOJ · Jun 26, 2021 · ba7b768 · ba7b768
1 parent 427e06b
commit ba7b768
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/templates/user/edit-profile.html b/templates/user/edit-profile.html
@@ -337,7 +337,7 @@
                         </td></tr>
                         <tr><td>
                             <a href="http://www.gravatar.com/" title="{{ _('Change your avatar') }}"
-                               target="_blank" class="inline-header">
+                               target="_blank" class="inline-header" rel="noopener">
                                 {{ _('Change your avatar') }}
                             </a>
                         </td></tr>