fix security issue

ApplETS · Apr 12, 2024 · eeaff34 · eeaff34
1 parent 5190f3f
commit eeaff34
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/emails/Views/Notify.cshtml b/emails/Views/Notify.cshtml
@@ -108,7 +108,7 @@
                                 <tr>
                                     <td class="pad" style="padding-bottom:15px;padding-left:10px;padding-right:10px;padding-top:10px;text-align:left;">
                                         <div class="alignment" align="center">
-                                            <!--[if mso]><v:roundrect xmlns:v="urn:schemas-microsoft-com:vml" xmlns:w="urn:schemas-microsoft-com:office:word" href="@Model.ButtonLink.ToString()" style="height:50px;width:237px;v-text-anchor:middle;" arcsize="8%" stroke="false" fillcolor="#3AAEE0"><w:anchorlock/><v:textbox inset="0px,0px,0px,0px"><center style="color:#ffffff; font-family:Arial, sans-serif; font-size:20px"><![endif]--><a href="@Model.ButtonLink.ToString()" target="_blank" style="text-decoration: none; display: inline-block; color: #ffffff; background-color: #747fff; border-radius: 4px; width: auto; border-top: 0px solid transparent; font-weight: 400; border-right: 0px solid transparent; border-bottom: 0px solid transparent; border-left: 0px solid transparent; padding-top: 5px; padding-bottom: 5px; font-family: Fjalla One, sans-serif; text-align: center; mso-border-alt: none; word-break: keep-all;"><span style="padding-left:20px;padding-right:20px;font-size:18px;display:inline-block;letter-spacing:normal;"><span dir="ltr" style="margin: 0; word-break: break-word; line-height: 40px;">@Model.ButtonSeePublicationText</span></span></a>
+                                            <!--[if mso]><v:roundrect xmlns:v="urn:schemas-microsoft-com:vml" xmlns:w="urn:schemas-microsoft-com:office:word" href="@Model.ButtonLink.ToString()" style="height:50px;width:237px;v-text-anchor:middle;" arcsize="8%" stroke="false" fillcolor="#3AAEE0"><w:anchorlock/><v:textbox inset="0px,0px,0px,0px"><center style="color:#ffffff; font-family:Arial, sans-serif; font-size:20px"><![endif]--><a href="@Model.ButtonLink.ToString()" target="_blank" rel="noreferrer noopener" style="text-decoration: none; display: inline-block; color: #ffffff; background-color: #747fff; border-radius: 4px; width: auto; border-top: 0px solid transparent; font-weight: 400; border-right: 0px solid transparent; border-bottom: 0px solid transparent; border-left: 0px solid transparent; padding-top: 5px; padding-bottom: 5px; font-family: Fjalla One, sans-serif; text-align: center; mso-border-alt: none; word-break: keep-all;"><span style="padding-left:20px;padding-right:20px;font-size:18px;display:inline-block;letter-spacing:normal;"><span dir="ltr" style="margin: 0; word-break: break-word; line-height: 40px;">@Model.ButtonSeePublicationText</span></span></a>
                                             <!--[if mso]></center></v:textbox></v:roundrect><![endif]-->
                                         </div>
                                     </td>
@@ -139,8 +139,8 @@
                                     margin-bottom: 16px;
                                 "
                                    href="@Model.UnsubscribeLink.ToString()"
-                                    target="_blank"
-                                    rel="noopener">@Model.UnsubscribeLinkText</a>
+                                   target="_blank"
+                                   rel="noreferrer noopener">@Model.UnsubscribeLinkText</a>
                             </div>
                         </td>
                     </tr>