From 10d8d68b215ea18bca8b2420c6f36ccefa0bc9d4 Mon Sep 17 00:00:00 2001
From: Livio Amstutz <livio.a@gmail.com>
Date: Fri, 3 Jul 2020 12:48:09 +0200
Subject: [PATCH] fix: Potentially unsafe external link (#335)

---
 internal/notification/static/templates/template.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/internal/notification/static/templates/template.html b/internal/notification/static/templates/template.html
index 4818d40d3..c6dd8bf3e 100644
--- a/internal/notification/static/templates/template.html
+++ b/internal/notification/static/templates/template.html
@@ -411,7 +411,7 @@
                                 <table role="presentation" border="0" cellpadding="0" cellspacing="0">
                                   <tbody>
                                     <tr>
-                                      <td> <a href="{{.URL}}" target="_blank">{{.ButtonText}}</a> </td>
+                                      <td> <a href="{{.URL}}" target="_blank" rel="noopener noreferrer">{{.ButtonText}}</a> </td>
                                     </tr>
                                   </tbody>
                                 </table>