Fix: fix reverse tabnabbing in most cases, add rel=noopener to most links to untrusted content

This commit is contained in:
Pieter Vander Vennet 2023-09-02 00:55:07 +02:00
parent fd39f66e2e
commit d9b8257e47
25 changed files with 462 additions and 77 deletions

View file

@ -184,14 +184,20 @@
"ca": "En quina pàgina web es pot trobar més informació sobre la bicicleta blanca o l'accident?"
},
"render": {
"en": "<a href='{source}' target='_blank'>More info available</a>",
"nl": "<a href='{source}' target='_blank'>Meer informatie</a>",
"de": "<a href='{source}' target='_blank'>Mehr Informationen</a>",
"it": "<a href='{source}' target='_blank'>Sono disponibili ulteriori informazioni</a>",
"ru": "<a href='{source}' target='_blank'>Доступна более подробная информация</a>",
"fr": "<a href='{source}' target='_blank'>Plus d'informations sont disponibles</a>",
"id": "<a href='{source}' target='_blank'>Informasi lanjut tersedia</a>",
"ca": "<a href='{source}' target='_blank'>Més informació disponible</a>"
"special": {
"type": "link",
"href": "{source}",
"text": {
"en": "More info available",
"nl": "Meer informatie",
"de": "Mehr Informationen",
"it": "Sono disponibili ulteriori informazioni",
"ru": "Доступна более подробная информация",
"fr": "Plus d'informations sont disponibles",
"id": "Informasi lanjut tersedia",
"ca": "Més informació disponible"
}
}
},
"freeform": {
"type": "url",

View file

@ -12,7 +12,7 @@
"labels": [
"defaults"
],
"render": "<a href='https://wikipedia.org/wiki/{wikipedia}' target='_blank'><img src='./assets/svg/wikipedia.svg' textmode='📖' alt='Wikipedia'/></a>",
"render": "<a href='https://wikipedia.org/wiki/{wikipedia}' target='_blank' rel='noopener'><img src='./assets/svg/wikipedia.svg' textmode='📖' alt='Wikipedia'/></a>",
"condition": {
"or": [
"wikipedia~*",
@ -23,7 +23,7 @@
{
"#": "ignore-image-in-then",
"if": "wikipedia=",
"then": "<a href='https://www.wikidata.org/wiki/{wikidata}' target='_blank'><img src='./assets/svg/wikidata.svg' alt='WD'/></a>"
"then": "<a href='https://www.wikidata.org/wiki/{wikidata}' target='_blank' rel='noopener'><img src='./assets/svg/wikidata.svg' alt='WD'/></a>"
}
]
},
@ -106,7 +106,7 @@
"labels": [
"defaults"
],
"render": "<a href='{website}' target='_blank'><img textmode='🌐' alt='website' src='./assets/layers/icons/website.svg'/></a>",
"render": "<a href='{website}' target='_blank' rel='noopener'><img textmode='🌐' alt='website' src='./assets/layers/icons/website.svg'/></a>",
"condition": "website~*"
},
{
@ -140,7 +140,7 @@
"labels": [
"defaults"
],
"render": "<a href='https://openstreetmap.org/{id}' target='_blank'><img alt='on osm' textmode='🗺️' src='./assets/svg/osm-logo-us.svg'/></a>",
"render": "<a href='https://openstreetmap.org/{id}' target='_blank' rel='noopener'><img alt='on osm' textmode='🗺️' src='./assets/svg/osm-logo-us.svg'/></a>",
"mappings": [
{
"if": "id~.*/-.*",
@ -149,7 +149,7 @@
{
"#": "ignore-image-in-then",
"if": "_backend~*",
"then": "<a href='{_backend}/{id}' target='_blank'><img src='./assets/svg/osm-logo-us.svg'/></a>"
"then": "<a href='{_backend}/{id}' target='_blank' rel='noopener'><img src='./assets/svg/osm-logo-us.svg'/></a>"
}
],
"condition": "id~(node|way|relation)/[0-9]*"

View file

@ -438,13 +438,19 @@
},
{
"render": {
"en": "More info on <a href='{website}' target='_blank'>the website</a>",
"nl": "Meer info op <a href='{website}' target='_blank'>de website</a>",
"de": "Weitere Informationen auf <a href='{website}' target='_blank'>der Webseite</a>",
"fr": "Plus d'infos sur <a href='{website}' target='_blank'>le site web</a>",
"ru": "Более подробная информация <a href='{website}' target='_blank'>на сайте</a>",
"it": "Maggiori informazioni sul <a href='{website}' target='_blank'>sito web</a>",
"hu": "További információ <a href='{website}' target='_blank'>ezen a weboldalon</a>"
"special": {
"type": "link",
"href": "{website}",
"text": {
"en": "More info on the website",
"nl": "Meer info op de website",
"de": "Weitere Informationen auf der Webseite",
"fr": "Plus d'infos sur le site web",
"ru": "Более подробная информация на сайте",
"it": "Maggiori informazioni sul sito web",
"hu": "További információ ezen a weboldalon"
}
}
},
"question": {
"en": "Is there a website with more information about this public bookcase?",