From 5741aa4e187ee78c37c42dbf89f4570936d0535d Mon Sep 17 00:00:00 2001
From: Cotes Chung <11371340+cotes2020@users.noreply.github.com>
Date: Tue, 27 Oct 2020 04:11:21 +0800
Subject: [PATCH] Fix the security of cross-origin destinations link.

---
 _data/meta.yml              | 1 +
 _includes/footer.html       | 4 ++--
 _includes/post-sharing.html | 4 ++--
 _includes/sidebar.html      | 2 +-
 4 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/_data/meta.yml b/_data/meta.yml
index d5cbfc8..7842dce 100644
--- a/_data/meta.yml
+++ b/_data/meta.yml
@@ -1,2 +1,3 @@
 name: Chirpy
 version: v2.5.1
+homepage: https://github.com/cotes2020/jekyll-theme-chirpy/
diff --git a/_includes/footer.html b/_includes/footer.html
index da33c14..b327c3e 100644
--- a/_includes/footer.html
+++ b/_includes/footer.html
@@ -22,9 +22,9 @@
     <div class="footer-right">
       <p class="mb-0">
         Powered by
-        <a href="https://jekyllrb.com" target="_blank">Jekyll</a>
+        <a href="https://jekyllrb.com" target="_blank" rel="noopener">Jekyll</a>
         with
-        <a href="https://github.com/cotes2020/jekyll-theme-chirpy/">Chirpy</a>
+        <a href="{{ site.data.meta.homepage }}" target="_blank" rel="noopener">{{ site.data.meta.name }}</a>
         theme.
       </p>
     </div>
diff --git a/_includes/post-sharing.html b/_includes/post-sharing.html
index 9819742..889dd48 100644
--- a/_includes/post-sharing.html
+++ b/_includes/post-sharing.html
@@ -16,7 +16,7 @@
     {% for share in site.data.share.platforms %}
       {% assign link = share.link | replace: 'TITLE', title | replace: 'URL', url %}
         <a href="{{ link }}" data-toggle="tooltip" data-placement="top"
-          title="{{ share.type }}" target="_blank">
+          title="{{ share.type }}" target="_blank" rel="noopener">
           <i class="fa-fw {{ share.icon }}"></i>
         </a>
     {% endfor %}
@@ -25,4 +25,4 @@
         data-toggle="tooltip" data-placement="top" title="Copy link"></i>
 
   </span>
-</div>
\ No newline at end of file
+</div>
diff --git a/_includes/sidebar.html b/_includes/sidebar.html
index 31cf920..7a3a90f 100644
--- a/_includes/sidebar.html
+++ b/_includes/sidebar.html
@@ -81,7 +81,7 @@
     {% endcapture %}
 
     {% if url != '' %}
-    <a href="{{ url }}" {% unless entry.noblank %}target="_blank"{% endunless %}>
+    <a href="{{ url }}" {% unless entry.noblank %}target="_blank" rel="noopener"{% endunless %}>
       <i class="{{ entry.icon }}"></i>
     </a>
     {% endif %}