From 643ebb4ed7d9dcc0cf7e12ab95d4ac8b50821eec Mon Sep 17 00:00:00 2001 From: Ryan Scott Date: Tue, 30 Jan 2018 15:01:58 +1300 Subject: [PATCH] Add rel to paper-button attribute bindings If using `href` and `target="_blank"` we need to pass through `rel="noopener noreferrer"` too https://www.jitbit.com/alexblog/256-targetblank---the-most-underestimated-vulnerability-ever/ --- addon/components/paper-button.js | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/addon/components/paper-button.js b/addon/components/paper-button.js index 44c10625b..1241a4b95 100644 --- a/addon/components/paper-button.js +++ b/addon/components/paper-button.js @@ -34,7 +34,8 @@ export default Component.extend(FocusableMixin, RippleMixin, ColorMixin, Proxiab 'href', 'target', 'title', - 'download' + 'download', + 'rel' ], classNameBindings: [ 'raised:md-raised',