Mercurial > p > roundup > code
view .codecov.yml @ 6282:d30501bafdfb
issue2551098: markdown links missing rel="noreferer nofollow"
Links generated by all markdown backends are missing the noopener and
nofollow relation that roundup's normal text -> html core adds to
prevent security issues and link spam.
Now rel="nofollow" is added to links generated by markdown2 backends
and rel="nofollow noopener" for mistune and markdown backends.
Markdown2 isn't as programable as the other two backends so I used the
built-in nofollow support. This means that a user that generates a
link that opens in a new window can manpulate the parent window.
| author | John Rouillard <rouilj@ieee.org> |
|---|---|
| date | Sat, 31 Oct 2020 14:51:16 -0400 |
| parents | c3ffa1ef6b7f |
| children | 5f0463897afc |
line wrap: on
line source
# - "path/to/folder" # ignore folders and all its contents # - "test_*.rb" # wildcards accepted # - "**/*.py" # glob accepted # - "[a-z]+/test_.*" # regexp accepted # ignore files that are build utils and not executed # code, or are deprecated. ignore: - "roundup/cgi/TAL/talgettext.py" # utility command - "roundup/cgi/TAL/DummyEngine.py" # test harness - "roundup/cgi/apache.py" # mod_python is deprecated - "roundup/install_util.py" # another build utlity - "roundup/dist" # more build utils
