From cc8526d633b5a9eda3c3d8a5d1d14b7aa98a4351 Mon Sep 17 00:00:00 2001
From: Jonathan Lloyd <jonathan@thisisjonathan.com>
Date: Fri, 28 Dec 2018 00:53:45 +0000
Subject: [PATCH] Fix tabnabbing vulnerability in Snow theme (#2439)

---
 themes/snow.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/themes/snow.js b/themes/snow.js
index 85069cec3e..4b3dba7c9f 100644
--- a/themes/snow.js
+++ b/themes/snow.js
@@ -110,7 +110,7 @@ class SnowTooltip extends BaseTooltip {
   }
 }
 SnowTooltip.TEMPLATE = [
-  '<a class="ql-preview" target="_blank" href="about:blank"></a>',
+  '<a class="ql-preview" rel="noopener noreferrer" target="_blank" href="about:blank"></a>',
   '<input type="text" data-formula="e=mc^2" data-link="https://quilljs.com" data-video="Embed URL">',
   '<a class="ql-action"></a>',
   '<a class="ql-remove"></a>'