From 3bdb9ff2e2e5c47501d40f6902f963e2e05e0bd5 Mon Sep 17 00:00:00 2001
From: Ananth Venkatesh <46249765+quantum9Innovation@users.noreply.github.com>
Date: Thu, 7 Mar 2024 09:47:55 -0800
Subject: [PATCH] fix(security): potentially unsafe external links (#51)

* fix(security): potentially unsafe external links

* style: format

---------

Co-authored-by: quantum9Innovation <quantum9Innovation@users.noreply.github.com>
---
 src/app/author/[author]/AuthorDisplay.tsx       | 2 +-
 src/app/components/DataDisplay.tsx              | 2 +-
 src/app/document/view/[slug]/DocumentViewer.tsx | 6 +++++-
 3 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/src/app/author/[author]/AuthorDisplay.tsx b/src/app/author/[author]/AuthorDisplay.tsx
index 722876b..eada955 100644
--- a/src/app/author/[author]/AuthorDisplay.tsx
+++ b/src/app/author/[author]/AuthorDisplay.tsx
@@ -27,7 +27,7 @@ const MainAuthorPosition = ({ author }: { author: Author }) => {
       {website ? (
         <div className='mt-2'>
           Visit {name.nickname ? name.nickname : name.first} at:{' '}
-          <a href={website} target='_blank'>
+          <a href={website} target='_blank' rel='noopener noreferrer'>
             {website}
           </a>
         </div>
diff --git a/src/app/components/DataDisplay.tsx b/src/app/components/DataDisplay.tsx
index 742ff4a..923c685 100644
--- a/src/app/components/DataDisplay.tsx
+++ b/src/app/components/DataDisplay.tsx
@@ -103,7 +103,7 @@ const ReviewerDisplay = ({ r }: Readonly<{ r: reviewer }>) => {
   }
   if (r.url) {
     return (
-      <a href={r.url} target='_blank'>
+      <a href={r.url} target='_blank' rel='noopener noreferrer'>
         {r.first} {r.last}
       </a>
     )
diff --git a/src/app/document/view/[slug]/DocumentViewer.tsx b/src/app/document/view/[slug]/DocumentViewer.tsx
index 7293786..1ca957d 100644
--- a/src/app/document/view/[slug]/DocumentViewer.tsx
+++ b/src/app/document/view/[slug]/DocumentViewer.tsx
@@ -93,7 +93,11 @@ const DocumentViewer = ({ slug }: Readonly<{ slug: string }>) => {
       {doi && (
         <p className='my-2'>
           <span className='font-bold'>DOI: </span>
-          <a href={`https://doi.org/${doi}`} target='_blank'>
+          <a
+            href={`https://doi.org/${doi}`}
+            target='_blank'
+            rel='noopener noreferrer'
+          >
             {doi}
           </a>
         </p>