@elastic/eui
Version:
Elastic UI Component Library
26 lines (24 loc) • 998 B
JavaScript
/*
* Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
* or more contributor license agreements. Licensed under the Elastic License
* 2.0 and the Server Side Public License, v 1; you may not use this file except
* in compliance with, at your election, the Elastic License 2.0 or the Server
* Side Public License, v 1.
*/
/**
* Secures outbound links. For more info:
* https://www.jitbit.com/alexblog/256-targetblank---the-most-underestimated-vulnerability-ever/
*/
export var getSecureRelForTarget = function getSecureRelForTarget(_ref) {
var _ref$target = _ref.target,
target = _ref$target === void 0 ? '' : _ref$target,
rel = _ref.rel;
var relParts = !!rel ? rel.split(' ').filter(function (part) {
return !!part.length && part !== 'noreferrer';
}) : [];
relParts.push('noreferrer');
if (target.includes('_blank') && relParts.indexOf('noopener') === -1) {
relParts.push('noopener');
}
return relParts.sort().join(' ').trim();
};