From e19b9ac56e227c40209cec774b5b74a539819153 Mon Sep 17 00:00:00 2001
From: Yangshun Tay <tay.yang.shun@gmail.com>
Date: Sat, 7 Apr 2018 19:14:29 -0700
Subject: [PATCH] Add rel="noreferrer noopener" to <a> with target="_blank"
 (#531)

* Add rel="noreferrer noopener" to <a> with target="_blank"

* Run Prettier
---
 examples/basics/core/Footer.js | 9 +++++++--
 lib/core/BlogPost.js           | 9 ++++++---
 lib/core/Doc.js                | 9 +++++++--
 lib/core/nav/HeaderNav.js      | 5 ++++-
 website/core/Footer.js         | 4 ++--
 5 files changed, 26 insertions(+), 10 deletions(-)

diff --git a/examples/basics/core/Footer.js b/examples/basics/core/Footer.js
index ee6394f4ea88..b43f1d6adff0 100644
--- a/examples/basics/core/Footer.js
+++ b/examples/basics/core/Footer.js
@@ -52,11 +52,15 @@ class Footer extends React.Component {
             </a>
             <a
               href="http://stackoverflow.com/questions/tagged/"
-              target="_blank">
+              target="_blank"
+              rel="noreferrer noopener">
               Stack Overflow
             </a>
             <a href="https://discordapp.com/">Project Chat</a>
-            <a href="https://twitter.com/" target="_blank">
+            <a
+              href="https://twitter.com/"
+              target="_blank"
+              rel="noreferrer noopener">
               Twitter
             </a>
           </div>
@@ -80,6 +84,7 @@ class Footer extends React.Component {
         <a
           href="https://code.facebook.com/projects/"
           target="_blank"
+          rel="noreferrer noopener"
           className="fbOpenSource">
           <img
             src={this.props.config.baseUrl + 'img/oss_logo.png'}
diff --git a/lib/core/BlogPost.js b/lib/core/BlogPost.js
index 0effbcb6eadb..ce5c1a7fa149 100644
--- a/lib/core/BlogPost.js
+++ b/lib/core/BlogPost.js
@@ -44,7 +44,7 @@ class BlogPost extends React.Component {
     if (post.authorFBID) {
       return (
         <div className={className}>
-          <a href={post.authorURL} target="_blank">
+          <a href={post.authorURL} target="_blank" rel="noreferrer noopener">
             <img
               src={
                 'https://graph.facebook.com/' +
@@ -59,7 +59,7 @@ class BlogPost extends React.Component {
     } else if (post.authorImage) {
       return (
         <div className={className}>
-          <a href={post.authorURL} target="_blank">
+          <a href={post.authorURL} target="_blank" rel="noreferrer noopener">
             <img src={post.authorImage} />
           </a>
         </div>
@@ -110,7 +110,10 @@ class BlogPost extends React.Component {
         <div className="authorBlock">
           {post.author ? (
             <p className="post-authorName">
-              <a href={post.authorURL} target="_blank">
+              <a
+                href={post.authorURL}
+                target="_blank"
+                rel="noreferrer noopener">
                 {post.author}
               </a>
               {post.authorTitle}
diff --git a/lib/core/Doc.js b/lib/core/Doc.js
index 06b76e941854..1b3e9311fc9a 100644
--- a/lib/core/Doc.js
+++ b/lib/core/Doc.js
@@ -31,7 +31,11 @@ class Doc extends React.Component {
       this.props.metadata.custom_edit_url ||
       (this.props.config.editUrl && this.props.config.editUrl + docSource);
     let editLink = editUrl && (
-      <a className="edit-page-link button" href={editUrl} target="_blank">
+      <a
+        className="edit-page-link button"
+        href={editUrl}
+        target="_blank"
+        rel="noreferrer noopener">
         {editThisDoc}
       </a>
     );
@@ -50,7 +54,8 @@ class Doc extends React.Component {
             '/' +
             this.props.language
           }
-          target="_blank">
+          target="_blank"
+          rel="noreferrer noopener">
           {translateThisDoc}
         </a>
       );
diff --git a/lib/core/nav/HeaderNav.js b/lib/core/nav/HeaderNav.js
index 63b9033ded2e..835f5cc7d01e 100644
--- a/lib/core/nav/HeaderNav.js
+++ b/lib/core/nav/HeaderNav.js
@@ -46,7 +46,10 @@ class LanguageDropDown extends React.Component {
     if (siteConfig.translationRecruitingLink) {
       enabledLanguages.push(
         <li key="recruiting">
-          <a href={siteConfig.translationRecruitingLink} target="_blank">
+          <a
+            href={siteConfig.translationRecruitingLink}
+            target="_blank"
+            rel="noreferrer noopener">
             {helpTranslateString}
           </a>
         </li>
diff --git a/website/core/Footer.js b/website/core/Footer.js
index 710c79678634..60560e6b41cb 100644
--- a/website/core/Footer.js
+++ b/website/core/Footer.js
@@ -92,8 +92,8 @@ class Footer extends React.Component {
         <a
           href="https://code.facebook.com/projects/"
           target="_blank"
-          className="fbOpenSource"
-        >
+          rel="noreferrer noopener"
+          className="fbOpenSource">
           <img
             src={`${this.props.config.baseUrl}img/oss_logo.png`}
             alt="Facebook Open Source"