Add rel="noopener" on external links

weechat/common/tracker.py

@@ -38,7 +38,7 @@ SAVANNAH_PATTERN = re.compile(r'(bug|task|patch) #([0-9]+)')
 def _replace_github_link(match):
     """Replace a match of GitHub keyword (like "closes #123") by URL."""
-    return '<a href="%s" target="_blank">%s</a>' % (
+    return '<a href="%s" target="_blank" rel="noopener">%s</a>' % (
         GITHUB_LINK % match.group(2),
         match.group(0))
@@ -47,7 +47,7 @@ def _replace_savannah_link(match):
     """Replace a match of Savannah keyword (like "bug #12345") by URL."""
     if match.group(1) not in SAVANNAH_LINKS:
         return match.group(0)
-    return '<a href="%s" target="_blank">%s</a>' % (
+    return '<a href="%s" target="_blank" rel="noopener">%s</a>' % (
         SAVANNAH_LINKS[match.group(1)] % match.group(2),
         match.group(0))
@@ -87,7 +87,7 @@ def commits_links(commits):
             img = 'link_twin.png'
             title = ' title="branch: %s"' % commit
         images.append('<a href="https://github.com/weechat/weechat/%s/%s" '
-                      'target="_blank">'
+                      'target="_blank" rel="noopener">'
                       '<img src="%simages/%s" width="14" height="14" '
                       'alt="*"%s></a>'
                       % (objtype, commit, settings.MEDIA_URL, img, title))

weechat/download/models.py

@@ -34,7 +34,7 @@ from weechat.common.tracker import commits_links, tracker_links
 from weechat.common.templatetags.localdate import localdate
 CVE_URL = ('<a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=%(cve)s" '
-           'target="_blank">%(cve)s</a>')
+           'target="_blank" rel="noopener">%(cve)s</a>')
 class Release(models.Model):

weechat/locale/de/LC_MESSAGES/django.po

@@ -20,8 +20,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat.org\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2018-01-18 18:42+0100\n"
-"PO-Revision-Date: 2018-01-14 21:20+0100\n"
+"POT-Creation-Date: 2018-01-19 21:00+0100\n"
+"PO-Revision-Date: 2018-01-19 21:04+0100\n"
 "Last-Translator: Nils Görs <weechatter@arcor.de>\n"
 "Language-Team: German <weechatter@arcor.de>\n"
 "Language: de\n"
@@ -6489,12 +6489,12 @@ msgstr "Mailingliste"
 #, python-format
 msgid ""
 "There are <a href=\"https://savannah.nongnu.org/mail/?group=weechat\" target="
-"\"_blank\">3 mailing lists <img src=\"%(MEDIA_URL)simages/link.png\" width="
-"\"16\" height=\"16\" alt=\">>\"></a>:"
+"\"_blank\" rel=\"noopener\">3 mailing lists <img src=\"%(MEDIA_URL)simages/"
+"link.png\" width=\"16\" height=\"16\" alt=\">>\"></a>:"
 msgstr ""
 "Es existieren <a href=\"https://savannah.nongnu.org/mail/?group=weechat\" "
-"target=\"_blank\">drei Mailinglisten <img src=\"%(MEDIA_URL)simages/link.png"
-"\" width=\"16\" height=\"16\" alt=\">>\"></a>:"
+"target=\"_blank\" rel=\"noopener\">drei Mailinglisten <img src="
+"\"%(MEDIA_URL)simages/link.png\" width=\"16\" height=\"16\" alt=\">>\"></a>:"
 #: templates/dev/support.html:59
 msgid "<strong>weechat-security</strong> (security advisories about WeeChat):"
@@ -7690,18 +7690,3 @@ msgstr "interner Fehler."
 #: themes/models.py:269
 msgid "Invalid name: different from theme."
 msgstr "ungültiger Name: unterscheidet sich vom Theme."
-
-#~ msgid "Display scripts for stable API (&ge; 0.3.0)"
-#~ msgstr "Zeige Skripten für stabile API (&ge; 0.3.0) an"
-
-#~ msgid "Display scripts for legacy API (&le; 0.2.6)"
-#~ msgstr "zeige Skripten für veraltete API (&le; 0.2.6) an"
-
-#~ msgid "sort by name"
-#~ msgstr "Sortiert nach Name"
-
-#~ msgid "sort by popularity"
-#~ msgstr "Sortiert nach Beliebtheit"
-
-#~ msgid "Sidebar with list of buffers."
-#~ msgstr "zeigt alle Buffer in einem separaten Seitenfenster an."

weechat/locale/fr/LC_MESSAGES/django.po

@@ -20,8 +20,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat.org\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2018-01-18 18:42+0100\n"
-"PO-Revision-Date: 2018-01-18 18:42+0100\n"
+"POT-Creation-Date: 2018-01-19 21:00+0100\n"
+"PO-Revision-Date: 2018-01-19 21:04+0100\n"
 "Last-Translator: Sébastien Helleu <flashcode@flashtux.org>\n"
 "Language-Team: French <flashcode@flashtux.org>\n"
 "Language: fr\n"
@@ -6423,12 +6423,12 @@ msgstr "Liste de diffusion"
 #, python-format
 msgid ""
 "There are <a href=\"https://savannah.nongnu.org/mail/?group=weechat\" target="
-"\"_blank\">3 mailing lists <img src=\"%(MEDIA_URL)simages/link.png\" width="
-"\"16\" height=\"16\" alt=\">>\"></a>:"
+"\"_blank\" rel=\"noopener\">3 mailing lists <img src=\"%(MEDIA_URL)simages/"
+"link.png\" width=\"16\" height=\"16\" alt=\">>\"></a>:"
 msgstr ""
 "Il y a <a href=\"https://savannah.nongnu.org/mail/?group=weechat\" target="
-"\"_blank\">3 listes de diffusion <img src=\"%(MEDIA_URL)simages/link.png\" "
-"width=\"16\" height=\"16\" alt=\">>\"></a> :"
+"\"_blank\" rel=\"noopener\">3 listes de diffusion <img src="
+"\"%(MEDIA_URL)simages/link.png\" width=\"16\" height=\"16\" alt=\">>\"></a> :"
 #: templates/dev/support.html:59
 msgid "<strong>weechat-security</strong> (security advisories about WeeChat):"
@@ -7593,18 +7593,3 @@ msgstr "Erreur interne."
 #: themes/models.py:269
 msgid "Invalid name: different from theme."
 msgstr "Nom invalide : différent du thème."
-
-#~ msgid "Display scripts for stable API (&ge; 0.3.0)"
-#~ msgstr "Afficher les scripts pour l'API stable (&ge; 0.3.0)"
-
-#~ msgid "Display scripts for legacy API (&le; 0.2.6)"
-#~ msgstr "Afficher les scripts pour l'ancienne API (&le; 0.2.6)"
-
-#~ msgid "sort by name"
-#~ msgstr "trier par nom"
-
-#~ msgid "sort by popularity"
-#~ msgstr "trier par popularité"
-
-#~ msgid "Sidebar with list of buffers."
-#~ msgstr "Barre latérale avec la liste des tampons."

weechat/locale/it/LC_MESSAGES/django.po

@@ -20,8 +20,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat.org\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2018-01-18 18:42+0100\n"
-"PO-Revision-Date: 2017-12-28 23:56+0100\n"
+"POT-Creation-Date: 2018-01-19 21:00+0100\n"
+"PO-Revision-Date: 2018-01-19 21:04+0100\n"
 "Last-Translator: Marco Paolone <marcopaolone@gmail.com>\n"
 "Language-Team: Italian <marcopaolone@gmail.com>\n"
 "Language: it\n"
@@ -6204,8 +6204,8 @@ msgstr "Mailing list"
 #, python-format
 msgid ""
 "There are <a href=\"https://savannah.nongnu.org/mail/?group=weechat\" target="
-"\"_blank\">3 mailing lists <img src=\"%(MEDIA_URL)simages/link.png\" width="
-"\"16\" height=\"16\" alt=\">>\"></a>:"
+"\"_blank\" rel=\"noopener\">3 mailing lists <img src=\"%(MEDIA_URL)simages/"
+"link.png\" width=\"16\" height=\"16\" alt=\">>\"></a>:"
 msgstr ""
 #: templates/dev/support.html:59
@@ -7387,14 +7387,3 @@ msgstr "Errore interno."
 #: themes/models.py:269
 msgid "Invalid name: different from theme."
 msgstr "Nome non valido: differente dal tema."
-
-#~ msgid "Display scripts for stable API (&ge; 0.3.0)"
-#~ msgstr "Visualizza script per la API stabile (&ge; 0.3.0)"
-
-#, fuzzy
-#~| msgid "Display scripts for old API (&le; 0.2.6)"
-#~ msgid "Display scripts for legacy API (&le; 0.2.6)"
-#~ msgstr "Visualizza script per la vecchia API (&le; 0.2.6)"
-
-#~ msgid "Sidebar with list of buffers."
-#~ msgstr "Barra laterale con elenco dei buffer."

weechat/locale/ja/LC_MESSAGES/django.po

@@ -20,8 +20,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat.org\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2018-01-18 18:42+0100\n"
-"PO-Revision-Date: 2018-01-13 09:00+0900\n"
+"POT-Creation-Date: 2018-01-19 21:00+0100\n"
+"PO-Revision-Date: 2018-01-19 21:04+0100\n"
 "Last-Translator: AYANOKOUZI, Ryuunosuke <i38w7i3@yahoo.co.jp>\n"
 "Language-Team: Japanese <https://github.com/l/weechat.org/tree/master/"
 "translation/ja_JP>\n"
@@ -6226,12 +6226,12 @@ msgstr "メーリングリスト"
 #, python-format
 msgid ""
 "There are <a href=\"https://savannah.nongnu.org/mail/?group=weechat\" target="
-"\"_blank\">3 mailing lists <img src=\"%(MEDIA_URL)simages/link.png\" width="
-"\"16\" height=\"16\" alt=\">>\"></a>:"
+"\"_blank\" rel=\"noopener\">3 mailing lists <img src=\"%(MEDIA_URL)simages/"
+"link.png\" width=\"16\" height=\"16\" alt=\">>\"></a>:"
 msgstr ""
 "<a href=\"https://savannah.nongnu.org/mail/?group=weechat\" target=\"_blank"
-"\">3 つのメーリングリスト<img src=\"%(MEDIA_URL)simages/link.png\" width="
-"\"16\" height=\"16\" alt=\">>\"></a>があります:"
+"\" rel=\"noopener\">3 つのメーリングリスト<img src=\"%(MEDIA_URL)simages/"
+"link.png\" width=\"16\" height=\"16\" alt=\">>\"></a>があります:"
 #: templates/dev/support.html:59
 msgid "<strong>weechat-security</strong> (security advisories about WeeChat):"
@@ -7377,18 +7377,3 @@ msgstr "内部エラー。"
 #: themes/models.py:269
 msgid "Invalid name: different from theme."
 msgstr "不正な名前: テーマとは異なります。"
-
-#~ msgid "Display scripts for stable API (&ge; 0.3.0)"
-#~ msgstr "安定版 API (&ge; 0.3.0) で書かれたスクリプトを表示"
-
-#~ msgid "Display scripts for legacy API (&le; 0.2.6)"
-#~ msgstr "旧来の API (&le; 0.2.6) で書かれたスクリプトを表示"
-
-#~ msgid "sort by name"
-#~ msgstr "名前順にソート"
-
-#~ msgid "sort by popularity"
-#~ msgstr "人気順にソート"
-
-#~ msgid "Sidebar with list of buffers."
-#~ msgstr "バッファリストをサイドバーに表示。"

weechat/locale/pl/LC_MESSAGES/django.po

@@ -20,8 +20,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat.org\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2018-01-18 18:42+0100\n"
-"PO-Revision-Date: 2017-12-28 23:56+0100\n"
+"POT-Creation-Date: 2018-01-19 21:00+0100\n"
+"PO-Revision-Date: 2018-01-19 21:04+0100\n"
 "Last-Translator: Krzysztof Korościk <soltys@soltys.info>\n"
 "Language-Team: Polish <soltys1@gmail.com>\n"
 "Language: pl\n"
@@ -6318,12 +6318,12 @@ msgstr "Lista mailingowa"
 #, python-format
 msgid ""
 "There are <a href=\"https://savannah.nongnu.org/mail/?group=weechat\" target="
-"\"_blank\">3 mailing lists <img src=\"%(MEDIA_URL)simages/link.png\" width="
-"\"16\" height=\"16\" alt=\">>\"></a>:"
+"\"_blank\" rel=\"noopener\">3 mailing lists <img src=\"%(MEDIA_URL)simages/"
+"link.png\" width=\"16\" height=\"16\" alt=\">>\"></a>:"
 msgstr ""
 "Dostępne są <a href=\"https://savannah.nongnu.org/mail/?group=weechat\" "
-"target=\"_blank\">3 listy mailingowe <img src=\"%(MEDIA_URL)simages/link.png"
-"\" width=\"16\" height=\"16\" alt=\">>\"></a>:"
+"target=\"_blank\" rel=\"noopener\">3 listy mailingowe <img src="
+"\"%(MEDIA_URL)simages/link.png\" width=\"16\" height=\"16\" alt=\">>\"></a>:"
 #: templates/dev/support.html:59
 msgid "<strong>weechat-security</strong> (security advisories about WeeChat):"
@@ -7484,18 +7484,3 @@ msgstr "Wewnętrzny błąd."
 #: themes/models.py:269
 msgid "Invalid name: different from theme."
 msgstr "Niewłaściwa nazwa: różni się od motywu."
-
-#~ msgid "Display scripts for stable API (&ge; 0.3.0)"
-#~ msgstr "Wyświetl skrypty dla stabilnego API (&ge; 0.3.0)"
-
-#~ msgid "Display scripts for legacy API (&le; 0.2.6)"
-#~ msgstr "Wyświetl skrypty dla starego API (&le; 0.2.6)"
-
-#~ msgid "sort by name"
-#~ msgstr "sortój po nazwie"
-
-#~ msgid "sort by popularity"
-#~ msgstr "sortój po popularości"
-
-#~ msgid "Sidebar with list of buffers."
-#~ msgstr "Boczny pasek z listą kanałów."

weechat/locale/pt_BR/LC_MESSAGES/django.po

@@ -20,8 +20,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: WeeChat.org\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2018-01-18 18:42+0100\n"
-"PO-Revision-Date: 2017-12-28 23:56+0100\n"
+"POT-Creation-Date: 2018-01-19 21:00+0100\n"
+"PO-Revision-Date: 2018-01-19 21:04+0100\n"
 "Last-Translator: Alexandre Bolelli <semeion7@gmail.com>\n"
 "Language-Team: Portuguese <semeion7@gmail.com>\n"
 "Language: pt_BR\n"
@@ -6285,8 +6285,8 @@ msgstr "Lista de discussão"
 #, python-format
 msgid ""
 "There are <a href=\"https://savannah.nongnu.org/mail/?group=weechat\" target="
-"\"_blank\">3 mailing lists <img src=\"%(MEDIA_URL)simages/link.png\" width="
-"\"16\" height=\"16\" alt=\">>\"></a>:"
+"\"_blank\" rel=\"noopener\">3 mailing lists <img src=\"%(MEDIA_URL)simages/"
+"link.png\" width=\"16\" height=\"16\" alt=\">>\"></a>:"
 msgstr ""
 #: templates/dev/support.html:59
@@ -7516,14 +7516,3 @@ msgstr "Erro interno."
 #: themes/models.py:269
 msgid "Invalid name: different from theme."
 msgstr "Nome inválido: diferente do tema."
-
-#~ msgid "Display scripts for stable API (&ge; 0.3.0)"
-#~ msgstr "Scripts de exibição para API estável (&ge; 0.3.0)"
-
-#, fuzzy
-#~| msgid "Display scripts for old API (&le; 0.2.6)"
-#~ msgid "Display scripts for legacy API (&le; 0.2.6)"
-#~ msgstr "Scripts de exibição para API antiga (&le; 0.2.6)"
-
-#~ msgid "Sidebar with list of buffers."
-#~ msgstr "Lista dos buffers na barra lateral."

weechat/templates/about/donate.html

@@ -38,11 +38,11 @@
   </p>
   <div class="donate">
-    <a href="https://liberapay.com/weechat/donate" target="_blank"><img alt="{% trans "Donate using Liberapay" %}" src="https://liberapay.com/assets/widgets/donate.svg"></a>
+    <a href="https://liberapay.com/weechat/donate" target="_blank" rel="noopener"><img alt="{% trans "Donate using Liberapay" %}" src="https://liberapay.com/assets/widgets/donate.svg"></a>
   </div>
   <div class="donate">
-    <form action="https://www.paypal.com/cgi-bin/webscr" method="post" target="_blank">
+    <form action="https://www.paypal.com/cgi-bin/webscr" method="post" target="_blank" rel="noopener">
       <p>
         <input type="image" src="{{ MEDIA_URL }}images/paypal.png" width="100" height="35" alt="Donate" name="submit">
         <input type="hidden" name="cmd" value="_s-xclick">
@@ -53,7 +53,7 @@
   <h3>{% trans "They support WeeChat with Liberapay" %}</h3>
-  {% trans "See the weechat page on Liberapay:" %} <a href="https://liberapay.com/weechat" target="_blank">https://liberapay.com/weechat <img src="{{ MEDIA_URL }}images/link.png" alt=">>"></a>
+  {% trans "See the weechat page on Liberapay:" %} <a href="https://liberapay.com/weechat" target="_blank" rel="noopener">https://liberapay.com/weechat <img src="{{ MEDIA_URL }}images/link.png" alt=">>"></a>
   {% if sponsor_list %}
   <h3>{% trans "They support WeeChat with Paypal" %}</h3>

weechat/templates/about/features.html

@@ -128,23 +128,23 @@
     <div>
       <ul>
         <li>
-          <a href="https://www.glowing-bear.org" target="_blank">Glowing Bear <img src="{{ MEDIA_URL }}images/link.png" alt=">>"></a>
+          <a href="https://www.glowing-bear.org" target="_blank" rel="noopener">Glowing Bear <img src="{{ MEDIA_URL }}images/link.png" alt=">>"></a>
           &mdash; HTML5
         </li>
         <li>
-          <a href="{% url 'download_version' 'devel' %}" target="_blank">QWeeChat <img src="{{ MEDIA_URL }}images/link.png" alt=">>"></a>
+          <a href="{% url 'download_version' 'devel' %}" target="_blank" rel="noopener">QWeeChat <img src="{{ MEDIA_URL }}images/link.png" alt=">>"></a>
           &mdash; {% trans "Qt interface" %}
         </li>
         <li>
-          <a href="https://github.com/ubergeek42/weechat-android" target="_blank">weechat-android <img src="{{ MEDIA_URL }}images/link.png" alt=">>"></a>
+          <a href="https://github.com/ubergeek42/weechat-android" target="_blank" rel="noopener">weechat-android <img src="{{ MEDIA_URL }}images/link.png" alt=">>"></a>
           &mdash; Android
         </li>
         <li>
-          <a href="https://github.com/the-kenny/weechat.el" target="_blank">weechat.el <img src="{{ MEDIA_URL }}images/link.png" alt=">>"></a>
+          <a href="https://github.com/the-kenny/weechat.el" target="_blank" rel="noopener">weechat.el <img src="{{ MEDIA_URL }}images/link.png" alt=">>"></a>
           &mdash; Emacs
         </li>
         <li>
-          <a href="https://github.com/eirikb/weecloud" target="_blank">weecloud <img src="{{ MEDIA_URL }}images/link.png" alt=">>"></a>
+          <a href="https://github.com/eirikb/weecloud" target="_blank" rel="noopener">weecloud <img src="{{ MEDIA_URL }}images/link.png" alt=">>"></a>
           &mdash; JavaScript
         </li>
       </ul>

weechat/templates/about/weechat.org.html

@@ -33,7 +33,7 @@
   <h2>{% trans "Source code" %}</h2>
   {% trans "Source code of WeeChat.org is available on GitHub:" %}
-  <a href="https://github.com/weechat/weechat.org" target="_blank">
+  <a href="https://github.com/weechat/weechat.org" target="_blank" rel="noopener">
     https://github.com/weechat/weechat.org
     <img src="{{ MEDIA_URL }}images/link.png" width="16" height="16" alt=">>">
   </a>

weechat/templates/base.html

@@ -84,9 +84,9 @@
       <a href="{% url 'about_weechat.org' %}">{% trans "About WeeChat.org" %}</a>
       &mdash;
       {% trans "Valid" %}:
-      <a href="http://validator.w3.org/check?uri=referer" target="_blank">HTML5</a> |
-      <a href="http://jigsaw.w3.org/css-validator/check/referer" target="_blank">CSS</a> |
-      <a href="http://www.w3.org/TR/WCAG20/" target="_blank">WCAG 2.0<!-- AAA --></a>
+      <a href="http://validator.w3.org/check?uri=referer" target="_blank" rel="noopener">HTML5</a> |
+      <a href="http://jigsaw.w3.org/css-validator/check/referer" target="_blank" rel="noopener">CSS</a> |
+      <a href="http://www.w3.org/TR/WCAG20/" target="_blank" rel="noopener">WCAG 2.0<!-- AAA --></a>
     </div>
   </div> <!-- footer -->

weechat/templates/dev/info_list.html

@@ -20,7 +20,7 @@
     </tr>
     {% for info in infos %}
     <tr class="{% cycle 'row1' 'row2' %}">
-      <td><a href="{% url 'dev_info_name' info.0 %}" target="_blank">{{ info.0 }}</a></td>
+      <td><a href="{% url 'dev_info_name' info.0 %}" target="_blank" rel="noopener">{{ info.0 }}</a></td>
       <td>{{ info.1|linebreaksbr }}</td>
       <td>{{ info.2 }}</td>
     </tr>

weechat/templates/dev/stats.html

@@ -21,7 +21,7 @@
 <div class="stats">
   {% trans "Git repository:" %}
-  <a href="{{ repository }}" target="_blank">{{ repository }} <img src={{ MEDIA_URL}}images/link.png width="16" height="16" alt=">>"></a>
+  <a href="{{ repository }}" target="_blank" rel="noopener">{{ repository }} <img src={{ MEDIA_URL}}images/link.png width="16" height="16" alt=">>"></a>
   <br><br>
   {% if sloc %}
@@ -37,7 +37,7 @@
   {% for svg in svg_list %}
   <div class="svg">
-    <a href="{{ MEDIA_URL }}images/stats/{{ stats }}_{{ svg }}.svg" target="_blank">SVG <img src={{ MEDIA_URL}}images/link.png width="16" height="16" alt=">>"></a>
+    <a href="{{ MEDIA_URL }}images/stats/{{ stats }}_{{ svg }}.svg" target="_blank" rel="noopener">SVG <img src={{ MEDIA_URL}}images/link.png width="16" height="16" alt=">>"></a>
     <object type="image/svg+xml" data="{{ MEDIA_URL }}images/stats/{{ stats }}_{{ svg }}.svg">{{ svg }}.svg</object>
   </div>
   {% endfor %}
@@ -47,7 +47,7 @@
   {% endif %}
   {% trans "Charts built with" %}
-  <a href="https://github.com/flashcode/gitchart" target="_blank">gitchart <img src="{{ MEDIA_URL }}images/link.png" width="16" height="16" alt=">>"></a>.
+  <a href="https://github.com/flashcode/gitchart" target="_blank" rel="noopener">gitchart <img src="{{ MEDIA_URL }}images/link.png" width="16" height="16" alt=">>"></a>.
 </div>

weechat/templates/dev/support.html

@@ -39,40 +39,40 @@
 <h2>{% trans "Bugs / Feature requests" %}</h2>
 {% trans "Bugs and feature requests for WeeChat, QWeeChat and scripts can be submitted on GitHub:" %}
-<a href="https://github.com/weechat" target="_blank">https://github.com/weechat <img src="{{ MEDIA_URL }}images/link.png" width="16" height="16" alt=">>"></a>
+<a href="https://github.com/weechat" target="_blank" rel="noopener">https://github.com/weechat <img src="{{ MEDIA_URL }}images/link.png" width="16" height="16" alt=">>"></a>
 <h2>Google+</h2>
 {% blocktrans %}WeeChat is on <a href="https://plus.google.com/">Google+</a>:{% endblocktrans %}
 <ul>
-  <li><a href="https://plus.google.com/+WeeChat" target="_blank">{% trans "Page" %} <img src="{{ MEDIA_URL }}images/link.png" width="16" height="16" alt=">>"></a></li>
-  <li><a href="https://plus.google.com/communities/104181302778416960107" target="_blank">{% trans "Community" %} <img src="{{ MEDIA_URL }}images/link.png" width="16" height="16" alt=">>"></a></li>
+  <li><a href="https://plus.google.com/+WeeChat" target="_blank" rel="noopener">{% trans "Page" %} <img src="{{ MEDIA_URL }}images/link.png" width="16" height="16" alt=">>"></a></li>
+  <li><a href="https://plus.google.com/communities/104181302778416960107" target="_blank" rel="noopener">{% trans "Community" %} <img src="{{ MEDIA_URL }}images/link.png" width="16" height="16" alt=">>"></a></li>
 </ul>
 <h2>{% trans "Mailing list" %}</h2>
-{% blocktrans %}There are <a href="https://savannah.nongnu.org/mail/?group=weechat" target="_blank">3 mailing lists <img src="{{ MEDIA_URL }}images/link.png" width="16" height="16" alt=">>"></a>:{% endblocktrans %}
+{% blocktrans %}There are <a href="https://savannah.nongnu.org/mail/?group=weechat" target="_blank" rel="noopener">3 mailing lists <img src="{{ MEDIA_URL }}images/link.png" width="16" height="16" alt=">>"></a>:{% endblocktrans %}
 <ul>
   <li>
     {% trans "<strong>weechat-security</strong> (security advisories about WeeChat):" %}
     <ul>
-      <li>{% trans "subscribe:" %} <a href="https://lists.nongnu.org/mailman/listinfo/weechat-security" target="_blank">https://lists.nongnu.org/mailman/listinfo/weechat-security <img src="{{ MEDIA_URL }}images/link.png" width="16" height="16" alt=">>"></a></li>
+      <li>{% trans "subscribe:" %} <a href="https://lists.nongnu.org/mailman/listinfo/weechat-security" target="_blank" rel="noopener">https://lists.nongnu.org/mailman/listinfo/weechat-security <img src="{{ MEDIA_URL }}images/link.png" width="16" height="16" alt=">>"></a></li>
       <li>{% trans "send mail to:" %} <a href="mailto:{% txt2html "weechat-security@nongnu.org" %}">{% txt2html "weechat-security@nongnu.org" %}</a></li>
     </ul>
   </li>
   <li>
     {% trans "<strong>weechat-support</strong> (installation, usage, bugs, ...):" %}
     <ul>
-      <li>{% trans "subscribe:" %} <a href="https://lists.nongnu.org/mailman/listinfo/weechat-support" target="_blank">https://lists.nongnu.org/mailman/listinfo/weechat-support <img src="{{ MEDIA_URL }}images/link.png" width="16" height="16" alt=">>"></a></li>
+      <li>{% trans "subscribe:" %} <a href="https://lists.nongnu.org/mailman/listinfo/weechat-support" target="_blank" rel="noopener">https://lists.nongnu.org/mailman/listinfo/weechat-support <img src="{{ MEDIA_URL }}images/link.png" width="16" height="16" alt=">>"></a></li>
       <li>{% trans "send mail to:" %} <a href="mailto:{% txt2html "weechat-support@nongnu.org" %}">{% txt2html "weechat-support@nongnu.org" %}</a></li>
     </ul>
   </li>
   <li>
     {% trans "<strong>weechat-dev</strong> (everything related to the development):" %}
     <ul>
-      <li>{% trans "subscribe:" %} <a href="https://lists.nongnu.org/mailman/listinfo/weechat-dev" target="_blank">https://lists.nongnu.org/mailman/listinfo/weechat-dev <img src="{{ MEDIA_URL }}images/link.png" width="16" height="16" alt=">>"></a></li>
+      <li>{% trans "subscribe:" %} <a href="https://lists.nongnu.org/mailman/listinfo/weechat-dev" target="_blank" rel="noopener">https://lists.nongnu.org/mailman/listinfo/weechat-dev <img src="{{ MEDIA_URL }}images/link.png" width="16" height="16" alt=">>"></a></li>
       <li>{% trans "send mail to:" %} <a href="mailto:{% txt2html "weechat-dev@nongnu.org" %}">{% txt2html "weechat-dev@nongnu.org" %}</a></li>
     </ul>
   </li>

weechat/templates/doc/doc.html

@@ -25,7 +25,7 @@
     </div>
     <ul>
       {% for dir in doc_list %}
-      <li><a href="/files/doc/old/{{ dir }}" target="_blank">{% trans "Version" %} {{ dir }} <img src="{{ MEDIA_URL }}images/link.png" width="16" height="16" alt=">>"></a></li>
+      <li><a href="/files/doc/old/{{ dir }}" target="_blank" rel="noopener">{% trans "Version" %} {{ dir }} <img src="{{ MEDIA_URL }}images/link.png" width="16" height="16" alt=">>"></a></li>
       {% endfor %}
     </ul>
   </div>
@@ -48,7 +48,7 @@
         {% for file in doc.1 %}
           <td class="icons{% if file.2 == bestlang %} bestlang{% if version == "devel" %}dev{% endif %}{% endif %}">
           {% if file.0 %}
-            <a href="/files/doc/{{ file.0 }}" target="_blank"><img src="{{ MEDIA_URL }}images/doc{% if doc.0.devel %}_dev{% endif %}.png" alt="HTML" width="17" height="22"></a>
+            <a href="/files/doc/{{ file.0 }}" target="_blank" rel="noopener"><img src="{{ MEDIA_URL }}images/doc{% if doc.0.devel %}_dev{% endif %}.png" alt="HTML" width="17" height="22"></a>
           {% else %}
             -
           {% endif %}

weechat/templates/download/packages.html

@@ -83,7 +83,7 @@
             {% if package.exists %}
               <a href="/files{{ package.type.htmldir }}/{{ package.filename }}">{{ package.filename }}</a>
               <span class="dlinfopackage">
-                ({{ package.filesize|filesizeformat }}{% if package.display_time %}, {{ package.filedate|localdate }} {{ package.filedate|date:"H:i" }}{% endif %}{% if package.has_checksum %}, <a href="{% url 'package_checksums' package.version.version package.checksum_type %}" target="_blank" title="{% trans "Checksum" %} ({{ package.checksum_type }}): {{ package.checksum }}">{{ package.checksum_type }}</a>{% endif %}{% if package.has_gpg_sig %}, <a href="/files{{ package.type.htmldir }}/{{ package.filename }}.asc" target="_blank">gpg sig</a>{% endif %})
+                ({{ package.filesize|filesizeformat }}{% if package.display_time %}, {{ package.filedate|localdate }} {{ package.filedate|date:"H:i" }}{% endif %}{% if package.has_checksum %}, <a href="{% url 'package_checksums' package.version.version package.checksum_type %}" target="_blank" rel="noopener" title="{% trans "Checksum" %} ({{ package.checksum_type }}): {{ package.checksum }}">{{ package.checksum_type }}</a>{% endif %}{% if package.has_gpg_sig %}, <a href="/files{{ package.type.htmldir }}/{{ package.filename }}.asc" target="_blank" rel="noopener">gpg sig</a>{% endif %})
               </span>
             {% else %}
               <span class="notfound">{{ package.filename }}</span>
@@ -91,14 +91,14 @@
           {% else %}
             {% if package.directory %}
               {% if package.exists %}
-                <a href="/files/{{ package.directory }}" target="_blank"{% if not package.exists %} class="notfound"{% endif %}>{{ package.directory }}</a>
+                <a href="/files/{{ package.directory }}" target="_blank" rel="noopener"{% if not package.exists %} class="notfound"{% endif %}>{{ package.directory }}</a>
                 <img src="{{ MEDIA_URL }}images/link.png" class="dllink" alt=">>">
               {% else %}
                 <span class="notfound">{{ package.directory }}</span>
               {% endif %}
             {% else %}
               {% if package.url %}
-                <a href="{{ package.url }}" target="_blank">{{ package.url }}</a>
+                <a href="{{ package.url }}" target="_blank" rel="noopener">{{ package.url }}</a>
                 <img src="{{ MEDIA_URL }}images/link.png" class="dllink" alt=">>">
               {% else %}
                 {{ package.text }}
@@ -113,13 +113,13 @@
         <div class="dlitem">
           <span class="dltype">{% trans "ChangeLog" %}</span>
           <img src="{{ MEDIA_URL }}images/dl_doc.png" class="dlicon" alt="doc">
-          <a href="/files/changelog/ChangeLog-{{ package_version.grouper.version }}.html" target="_blank">ChangeLog-{{ package_version.grouper.version }}.html</a>
+          <a href="/files/changelog/ChangeLog-{{ package_version.grouper.version }}.html" target="_blank" rel="noopener">ChangeLog-{{ package_version.grouper.version }}.html</a>
           <img src="{{ MEDIA_URL }}images/link.png" class="dllink" alt=">>">
         </div>
         <div class="dlitem">
           <span class="dltype">{% trans "Release notes" %}</span>
           <img src="{{ MEDIA_URL }}images/dl_doc.png" class="dlicon" alt="doc">
-          <a href="/files/releasenotes/ReleaseNotes-{{ package_version.grouper.version }}.html" target="_blank">ReleaseNotes-{{ package_version.grouper.version }}.html</a>
+          <a href="/files/releasenotes/ReleaseNotes-{{ package_version.grouper.version }}.html" target="_blank" rel="noopener">ReleaseNotes-{{ package_version.grouper.version }}.html</a>
           <img src="{{ MEDIA_URL }}images/link.png" class="dllink" alt=">>">
         </div>
       </div>
@@ -131,7 +131,7 @@
         <div class="dlitem">
           <span class="dltype">HTML5</span>
           <img src="{{ MEDIA_URL }}images/dl_html5.png" class="dlicon" alt="html5">
-          <a href="https://www.glowing-bear.org" target="_blank">https://www.glowing-bear.org/</a>
+          <a href="https://www.glowing-bear.org" target="_blank" rel="noopener">https://www.glowing-bear.org/</a>
           <img src="{{ MEDIA_URL }}images/link.png" class="dllink" alt=">>">
         </div>
         <div class="dlitem">
@@ -142,19 +142,19 @@
         <div class="dlitem">
           <span class="dltype">Android</span>
           <img src="{{ MEDIA_URL }}images/dl_android.png" class="dlicon" alt="android">
-          <a href="https://github.com/ubergeek42/weechat-android" target="_blank">https://github.com/ubergeek42/weechat-android</a>
+          <a href="https://github.com/ubergeek42/weechat-android" target="_blank" rel="noopener">https://github.com/ubergeek42/weechat-android</a>
           <img src="{{ MEDIA_URL }}images/link.png" class="dllink" alt=">>">
         </div>
         <div class="dlitem">
           <span class="dltype">Emacs</span>
           <img src="{{ MEDIA_URL }}images/dl_emacs.png" class="dlicon" alt="emacs">
-          <a href="https://github.com/the-kenny/weechat.el" target="_blank">https://github.com/the-kenny/weechat.el</a>
+          <a href="https://github.com/the-kenny/weechat.el" target="_blank" rel="noopener">https://github.com/the-kenny/weechat.el</a>
           <img src="{{ MEDIA_URL }}images/link.png" class="dllink" alt=">>">
         </div>
         <div class="dlitem">
           <span class="dltype">JavaScript</span>
           <img src="{{ MEDIA_URL }}images/dl_web.png" class="dlicon" alt="web-js">
-          <a href="https://github.com/eirikb/weecloud" target="_blank">https://github.com/eirikb/weecloud</a>
+          <a href="https://github.com/eirikb/weecloud" target="_blank" rel="noopener">https://github.com/eirikb/weecloud</a>
           <img src="{{ MEDIA_URL }}images/link.png" class="dllink" alt=">>">
         </div>
       </div>
@@ -206,19 +206,19 @@
         <div class="dlitem">
           <span class="dltype">{% trans "Savannah page" %}</span>
           <img src="{{ MEDIA_URL }}images/dl_savannah.png" class="dlicon" alt="savannah">
-          <a href="http://savannah.nongnu.org/projects/weechat" target="_blank">http://savannah.nongnu.org/projects/weechat</a>
+          <a href="http://savannah.nongnu.org/projects/weechat" target="_blank" rel="noopener">http://savannah.nongnu.org/projects/weechat</a>
           <img src="{{ MEDIA_URL }}images/link.png" class="dllink" alt=">>">
         </div>
         <div class="dlitem">
           <span class="dltype">{% trans "Git - sources" %}</span>
           <img src="{{ MEDIA_URL }}images/dl_github.png" class="dlicon" alt="git">
-          <a href="https://github.com/weechat/weechat" target="_blank">https://github.com/weechat/weechat</a>
+          <a href="https://github.com/weechat/weechat" target="_blank" rel="noopener">https://github.com/weechat/weechat</a>
           <img src="{{ MEDIA_URL }}images/link.png" class="dllink" alt=">>">
         </div>
         <div class="dlitem">
           <span class="dltype">{% trans "Git - scripts" %}</span>
           <img src="{{ MEDIA_URL }}images/dl_github.png" class="dlicon" alt="git">
-          <a href="https://github.com/weechat/scripts" target="_blank">https://github.com/weechat/scripts</a>
+          <a href="https://github.com/weechat/scripts" target="_blank" rel="noopener">https://github.com/weechat/scripts</a>
           <img src="{{ MEDIA_URL }}images/link.png" class="dllink" alt=">>">
         </div>
         <div class="dlitem">

weechat/templates/download/security.html

@@ -20,7 +20,7 @@
   {% trans "This table contains a list of all known and fixed security vulnerabilities in WeeChat stable releases (the security vulnerabilities introduced during development of a version and fixed before a stable release are not mentioned)." %}
   <br><br>
   {% trans "Note: you can be warned about security vulnerabilities by subscribing to this mailing list:" %}
-  <a href="https://lists.nongnu.org/mailman/listinfo/weechat-security" target="_blank">
+  <a href="https://lists.nongnu.org/mailman/listinfo/weechat-security" target="_blank" rel="noopener">
     weechat-security <img src="{{ MEDIA_URL }}images/link.png" width="16" height="16" alt=">>">
   </a>

weechat/templates/home/home.html

@@ -56,19 +56,19 @@
       <p>
         {% trans "You can follow latest WeeChat developments on:" %}
         <br>
-        <a href="https://diasp.eu/u/weechat" target="_blank">
+        <a href="https://diasp.eu/u/weechat" target="_blank" rel="noopener">
           <img src="{{ MEDIA_URL }}images/diaspora.png" class="follow" alt="[Diaspora]" title="Diaspora">
         </a>
-        <a href="https://plus.google.com/+WeeChat" target="_blank">
+        <a href="https://plus.google.com/+WeeChat" target="_blank" rel="noopener">
           <img src="{{ MEDIA_URL }}images/google_plus.png" class="follow" alt="[Google+]" title="Google+">
         </a>
-        <a href="https://twitter.com/WeeChatClient" target="_blank">
+        <a href="https://twitter.com/WeeChatClient" target="_blank" rel="noopener">
           <img src="{{ MEDIA_URL }}images/twitter.png" class="follow" alt="Twitter" title="Twitter">
         </a>
-        <a href="https://hostux.social/@weechat" target="_blank">
+        <a href="https://hostux.social/@weechat" target="_blank" rel="noopener">
           <img src="{{ MEDIA_URL }}images/mastodon.png" class="follow" alt="Mastodon" title="Mastodon">
         </a>
-        <a href="https://weechat.org/blog/" target="_blank">
+        <a href="https://weechat.org/blog/" target="_blank" rel="noopener">
           <img src="{{ MEDIA_URL }}images/dotclear.png" class="follow" alt="[{% trans "Devel blog" %}]" title="{% trans "Devel blog" %}">
         </a>
         <a href="{% url 'dev_roadmap' %}">

weechat/templates/menu.html

@@ -21,8 +21,8 @@
             <li><a href="{% url 'doc_version' 'stable' %}">{% trans "Stable version" %}</a></li>
             <li><a href="{% url 'doc_version' 'devel' %}">{% trans "Dev version" %}</a></li>
             <li><a href="{% url 'doc_version' 'old' %}">{% trans "Old versions" %}</a></li>
-            <li><a href="/files/doc/weechat_faq.en.html" target="_blank">{% trans "FAQ" %} ({% trans "English" %}) <img src="{{ MEDIA_URL }}images/link.png" width="16" height="16" alt=">>"></a></li>
-            <li><a href="/files/doc/devel/weechat_plugin_api.en.html" target="_blank">API ({% trans "English" %}) <img src="{{ MEDIA_URL }}images/link.png" width="16" height="16" alt=">>"></a></li>
+            <li><a href="/files/doc/weechat_faq.en.html" target="_blank" rel="noopener">{% trans "FAQ" %} ({% trans "English" %}) <img src="{{ MEDIA_URL }}images/link.png" width="16" height="16" alt=">>"></a></li>
+            <li><a href="/files/doc/devel/weechat_plugin_api.en.html" target="_blank" rel="noopener">API ({% trans "English" %}) <img src="{{ MEDIA_URL }}images/link.png" width="16" height="16" alt=">>"></a></li>
           </ul>
         </li>
         <li class="nav-download">
@@ -62,7 +62,7 @@
             <li><a href="{% url 'dev_stats' %}">{% trans "Statistics" %}</a></li>
             <li><a href="{% url 'dev_info' %}">{% trans "Info" %}</a></li>
             <li><a href="{% url 'dev_support' %}">{% trans "Support" %}</a></li>
-            <li><a href="https://weechat.org/blog/" target="_blank">{% trans "Devel blog" %} <img src="{{ MEDIA_URL }}images/link.png" width="16" height="16" alt=">>"></a></li>
-            <li><a href="https://github.com/weechat" target="_blank">{% trans "Repositories" %} <img src="{{ MEDIA_URL }}images/link.png" width="16" height="16" alt=">>"></a></li>
+            <li><a href="https://weechat.org/blog/" target="_blank" rel="noopener">{% trans "Devel blog" %} <img src="{{ MEDIA_URL }}images/link.png" width="16" height="16" alt=">>"></a></li>
+            <li><a href="https://github.com/weechat" target="_blank" rel="noopener">{% trans "Repositories" %} <img src="{{ MEDIA_URL }}images/link.png" width="16" height="16" alt=">>"></a></li>
           </ul>
         </li>