From c67bfbbf8c27406d53604188bf2d917ecbaa0514 Mon Sep 17 00:00:00 2001
From: davidovski <david@davidovski.xyz>
Date: Thu, 16 May 2024 13:00:04 +0100
Subject: [PATCH] use noreferer and noopener for anchors

---
 engines/invidious/video.php | 2 +-
 engines/qwant/image.php     | 2 +-
 engines/text/text.php       | 4 ++--
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/engines/invidious/video.php b/engines/invidious/video.php
index ed71035f..97cca8a1 100644
--- a/engines/invidious/video.php
+++ b/engines/invidious/video.php
@@ -53,7 +53,7 @@ public static function print_results($results, $opts) {
                 $thumbnail = preg_replace('/(?:https?:\/\/)?(?:www\.)?youtube\.com\/watch\?v=([^\s]+)/', 'https://i.ytimg.com/vi/$1/maxresdefault.jpg', $url) ?? '';
 
                 echo "<div class=\"text-result-wrapper\">";
-                echo "<a href=\"$url\">";
+                echo "<a rel=\"noreferer noopener\" href=\"$url\">";
                 echo "$base_url";
                 echo "<h2>$title</h2>";
                 echo "<img class=\"video-img\" src=\"image_proxy.php?url=$thumbnail\">";
diff --git a/engines/qwant/image.php b/engines/qwant/image.php
index 78c85b7d..77623330 100644
--- a/engines/qwant/image.php
+++ b/engines/qwant/image.php
@@ -44,7 +44,7 @@ public static function print_results($results, $opts) {
                     $url = $result["url"];
                     $url = check_for_privacy_frontend($url, $opts);
 
-                    echo "<a title=\"$alt\" href=\"$url\" target=\"_blank\">";
+                    echo "<a title=\"$alt\" href=\"$url\" rel=\"noreferer noopener\" target=\"_blank\">";
                     echo "<img src=\"image_proxy.php?url=$thumbnail\">";
                     echo "</a>";
                 }
diff --git a/engines/text/text.php b/engines/text/text.php
index 119b0a37..a0ec2864 100644
--- a/engines/text/text.php
+++ b/engines/text/text.php
@@ -154,7 +154,7 @@ public static function print_results($results, $opts)  {
                 echo $response;
                 if ($source) {
                     $source = check_for_privacy_frontend($source, $opts);
-                    echo "<a href=\"$source\" target=\"_blank\">$source</a>";
+                    echo "<a href=\"$source\" rel=\"noreferer noopener\" target=\"_blank\">$source</a>";
                 }
                 echo "</p>";
             }
@@ -175,7 +175,7 @@ public static function print_results($results, $opts)  {
                 $description = $result["description"];
 
                 echo "<div class=\"text-result-wrapper\">";
-                echo "<a href=\"$url\">";
+                echo "<a rel=\"noreferer noopener\"  href=\"$url\">";
                 echo "$base_url";
                 echo "<h2>$title</h2>";
                 echo "</a>";