Fix security hotspot: rel=noopener

bcgov · Sep 13, 2024 · 4992b85 · 4992b85
1 parent a541433
commit 4992b85
Show file tree

Hide file tree

Showing 16 changed files with 101 additions and 101 deletions.
diff --git a/bcmi/src/app/app.component.html b/bcmi/src/app/app.component.html
@@ -166,10 +166,10 @@ <h4>Connect With Us</h4>
 		<div class="footer-admin clearfix">
 			<ul class="gov-links">
 				<li><a href="#">Home</a></li>
-				<li><a href="http://www2.gov.bc.ca/gov/content/home/copyright" target="_blank">Copyright</a></li>
-				<li><a href="http://www2.gov.bc.ca/gov/content/home/disclaimer" target="_blank">Disclaimer</a></li>
-				<li><a href="http://www2.gov.bc.ca/gov/content/home/privacy" target="_blank">Privacy</a></li>
-				<li><a href="http://www2.gov.bc.ca/gov/content/home/accessibility" target="_blank">Accessibility</a></li>
+				<li><a href="http://www2.gov.bc.ca/gov/content/home/copyright" target="_blank" rel="noopener">Copyright</a></li>
+				<li><a href="http://www2.gov.bc.ca/gov/content/home/disclaimer" target="_blank" rel="noopener">Disclaimer</a></li>
+				<li><a href="http://www2.gov.bc.ca/gov/content/home/privacy" target="_blank" rel="noopener">Privacy</a></li>
+				<li><a href="http://www2.gov.bc.ca/gov/content/home/accessibility" target="_blank" rel="noopener">Accessibility</a></li>
 			</ul>
 			<ul class="connect-links">
 				<li>
@@ -178,13 +178,13 @@ <h4>Connect With Us</h4>
 						data-layout="button"
 						data-size="large"
 						data-mobile-iframe="true">
-						<a class="fb-xfbml-parse-ignore" target="_blank" href="https://www.facebook.com/sharer/sharer.php?u=http%3A%2F%2Fmines.nrs.gov.bc.ca%2F&amp;src=sdkpreparse">
+						<a class="fb-xfbml-parse-ignore" target="_blank" rel="noopener" href="https://www.facebook.com/sharer/sharer.php?u=http%3A%2F%2Fmines.nrs.gov.bc.ca%2F&amp;src=sdkpreparse">
 							<img alt="facebook share" src="assets/images/facebook_circle.svg"/>
 						</a>
 					</div>
 				</li>
 				<li>
-					<a class="twitter-share-button" href="https://twitter.com/share" data-show-count="false" target="_blank">
+					<a class="twitter-share-button" href="https://twitter.com/share" data-show-count="false" target="_blank" rel="noopener">
 						<img alt="twitter share" src="assets/images/twitter_circle.svg"/>
 					</a>
 					<script async src="//platform.twitter.com/widgets.js" charset="utf-8"></script>

diff --git a/.../administrative-penalties-tab-content/administrative-penalties-tab-content.component.html b/.../administrative-penalties-tab-content/administrative-penalties-tab-content.component.html
@@ -108,7 +108,7 @@
                   </div>
                   <div class="col-sm-6">
                     <strong class="name">Document:</strong>
-                    <a *ngFor="let document of item.documents" class="value" href="{{ document.url }}" target="_blank">
+                    <a *ngFor="let document of item.documents" class="value" href="{{ document.url }}" target="_blank" rel="noopener">
                       {{ document.fileName }}
                       <br />
                     </a>

diff --git a/...-actions/offence-prosecutions-tab-content/offence-prosecutions-tab-content.component.html b/...-actions/offence-prosecutions-tab-content/offence-prosecutions-tab-content.component.html
@@ -110,7 +110,7 @@
                   </div>
                   <div class="col-sm-6">
                     <strong class="name">Link to Information:</strong>
-                    <a *ngFor="let document of item.documents" class="value" href="{{ document.url }}" target="_blank">
+                    <a *ngFor="let document of item.documents" class="value" href="{{ document.url }}" target="_blank" rel="noopener">
                       {{ document.fileName }}
                       <br />
                     </a>

diff --git a/bcmi/src/app/map/main-map/main-map.component.html b/bcmi/src/app/map/main-map/main-map.component.html
@@ -25,7 +25,7 @@ <h5 class="modal-title" id="mapModalLabel">Disclaimer</h5>
         <p>The permitted mine spatial area represents areas where mining activity has been approved and a permit
         has been issued under the Mines Act. Please note that Permitted Mine Areas are not available
         for every mine site. More information on this dataset can be
-        found <a href="https://catalogue.data.gov.bc.ca/dataset/permitted-mine-areas-major-mine" target="_blank">here</a>.
+        found <a href="https://catalogue.data.gov.bc.ca/dataset/permitted-mine-areas-major-mine" target="_blank" rel="noopener">here</a>.
       </p>
     </div>
     <div class="modal-footer">

diff --git a/.../src/app/projects/project-detail/authorizations/authorizations-tab-content.component.html b/.../src/app/projects/project-detail/authorizations/authorizations-tab-content.component.html
@@ -33,7 +33,7 @@ <h3>{{agency.act}} <span>{{agency.name}}</span></h3>
               <div class="authorizations-list__related-documents card" *ngIf="c.documents.length > 0">
                 <div class="card-header">Related Documents</div>
                 <ul class="authorizations-list__related-documents-list list-group">
-                  <li class="list-group-item" *ngFor="let d of c.documents"><a href="{{d.ref}}" target="_blank">{{d.name}}</a></li>
+                  <li class="list-group-item" *ngFor="let d of c.documents"><a href="{{d.ref}}" target="_blank" rel="noopener">{{d.name}}</a></li>
                 </ul>
               </div>
             </div>
@@ -52,7 +52,7 @@ <h3>{{agency.act}} <span>{{agency.name}}</span></h3>
   <section class="main-footer" *ngIf="project.morePermitsLink">
     <h3>Can't find what you are looking for?</h3>
     <p class="mb-0">Mines Act permits issued for {{project.name}} prior to {{project.morePermitsLinkYear}} can be accessed <a href="{{project.morePermitsLink}}"
-        target="_blank">here</a>.</p>
+        target="_blank" rel="noopener">here</a>.</p>
   </section>
 
 </div>
diff --git a/bcmi/src/app/projects/project-detail/compliance/compliance-tab-content.component.html b/bcmi/src/app/projects/project-detail/compliance/compliance-tab-content.component.html
@@ -65,7 +65,7 @@ <h3>Inspections &amp; Orders</h3>
                 <div class="inspections-list__related-documents card" *ngIf="c.documents.length > 0">
                   <div class="card-header">Related Documents</div>
                   <ul class="inspections-list__related-documents-list list-group">
-                    <li class="list-group-item" *ngFor="let d of c.documents"><a href="{{d.ref}}" target="_blank">{{d.name}}</a></li>
+                    <li class="list-group-item" *ngFor="let d of c.documents"><a href="{{d.ref}}" target="_blank" rel="noopener">{{d.name}}</a></li>
                   </ul>
                 </div>
               </div>
@@ -84,7 +84,7 @@ <h3>Inspections &amp; Orders</h3>
 
   <section class="main-footer" *ngIf="project.moreInspectionsLink">
     <h3>Can't find what you are looking for?</h3>
-    <p class="mb-0">Ministry of Energy, Mines, and Low Carbon Innovation inspection reports for {{project?.name}} from {{project?.moreInspectionsLinkYear}} onwards can be accessed <a href="{{project.moreInspectionsLink}}" target="_blank">here</a>.</p>
+    <p class="mb-0">Ministry of Energy, Mines, and Low Carbon Innovation inspection reports for {{project?.name}} from {{project?.moreInspectionsLinkYear}} onwards can be accessed <a href="{{project.moreInspectionsLink}}" target="_blank" rel="noopener">here</a>.</p>
    </section>
 
 </div>
diff --git a/bcmi/src/app/projects/project-detail/documents/documents-tab-content.component.html b/bcmi/src/app/projects/project-detail/documents/documents-tab-content.component.html
@@ -51,7 +51,7 @@
               <div class="inspections-list__related-documents card" *ngIf="item.documents.length > 0">
                 <div class="card-header">Related Documents</div>
                 <ul class="list-group">
-                  <li class="list-group-item" *ngFor="let doc of item.documents"><a href="{{doc.ref}}" target="_blank">{{doc.name}}</a></li>
+                  <li class="list-group-item" *ngFor="let doc of item.documents"><a href="{{doc.ref}}" target="_blank" rel="noopener">{{doc.name}}</a></li>
                 </ul>
               </div>
             </div>

diff --git a/bcmi/src/app/projects/project-detail/project-detail.component.html b/bcmi/src/app/projects/project-detail/project-detail.component.html
@@ -61,7 +61,7 @@ <h4 class="card-header">Project Details</h4>
         <h4 class="card-header">External Links &amp; Resources</h4>
         <ul class="nv-list">
           <li *ngFor="let l of project?.links">
-            <a target="_blank" href="{{l.url}}">{{l.title}}</a>
+            <a target="_blank" rel="noopener" href="{{l.url}}">{{l.title}}</a>
           </li>
         </ul>
       </section>