From bfa6852334f2b9f5e9678feb01138b1c03212118 Mon Sep 17 00:00:00 2001
From: Nick Craig-Wood <nick@craig-wood.com>
Date: Tue, 10 Jun 2025 11:20:58 +0100
Subject: [PATCH] docs: target="_blank" must have rel="noopener"

---
 docs/layouts/chrome/navbar.html                |  4 ++--
 docs/layouts/shortcodes/bizbutton.html         |  2 +-
 docs/layouts/shortcodes/monthly_donations.html | 12 ++++++------
 docs/layouts/shortcodes/one_off_donations.html | 10 +++++-----
 docs/layouts/shortcodes/provider.html          |  2 +-
 docs/layouts/shortcodes/sponsor.html           |  2 +-
 6 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/docs/layouts/chrome/navbar.html b/docs/layouts/chrome/navbar.html
index 218e6d49a..617534db0 100644
--- a/docs/layouts/chrome/navbar.html
+++ b/docs/layouts/chrome/navbar.html
@@ -125,10 +125,10 @@
     </ul>
     <ul class="navbar-nav mr-auto">
       <li class="nav-item active">
-        <a href="https://rclone.com/" target="_blank" class="nav-link bizbutton" title="Click here for support and advertising contracts"><i class="fa fa-briefcase"></i> For Business</a>
+        <a href="https://rclone.com/" target="_blank" rel="noopener" class="nav-link bizbutton" title="Click here for support and advertising contracts"><i class="fa fa-briefcase"></i> For Business</a>
       </li>
     </ul>
-    <form class="form-inline" name="search_form" action="https://google.com/search" target="_blank" onsubmit="on_search();">
+    <form class="form-inline" name="search_form" action="https://google.com/search" target="_blank" rel="noopener" onsubmit="on_search();">
       <input name="words" value="" type="search" placeholder="search..." class="form-control form-control-sm">
       <input name="q" value="" type="hidden">
       <input name="as_sitesearch" value="https://rclone.org/" type="hidden">
diff --git a/docs/layouts/shortcodes/bizbutton.html b/docs/layouts/shortcodes/bizbutton.html
index d9a12a5db..c969e9084 100644
--- a/docs/layouts/shortcodes/bizbutton.html
+++ b/docs/layouts/shortcodes/bizbutton.html
@@ -1 +1 @@
-<a  class="btn btn-primary" role="button" href="https://rclone.com/" target="_blank"><i class="fa fa-briefcase" aria-hidden="true"></i> For Business</a>
+<a  class="btn btn-primary" role="button" href="https://rclone.com/" target="_blank" rel="noopener"><i class="fa fa-briefcase" aria-hidden="true"></i> For Business</a>
diff --git a/docs/layouts/shortcodes/monthly_donations.html b/docs/layouts/shortcodes/monthly_donations.html
index 7b8518981..d83101ae8 100644
--- a/docs/layouts/shortcodes/monthly_donations.html
+++ b/docs/layouts/shortcodes/monthly_donations.html
@@ -1,16 +1,16 @@
 <div>
-  <a  class="btn btn-primary" role="button" href="https://github.com/sponsors/ncw" target="_blank"><i class="fab fa-github" aria-hidden="true"></i> GitHub Sponsors</a>
+  <a  class="btn btn-primary" role="button" href="https://github.com/sponsors/ncw" target="_blank" rel="noopener"><i class="fab fa-github" aria-hidden="true"></i> GitHub Sponsors</a>
   <div class="dropdown" style="display: inline;">
     <a class="btn btn-primary dropdown-toggle" href="#" role="button" id="dropdownMenuButton" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">
       <i class="fab fa-paypal" aria-hidden="true"></i> PayPal
     </a>
     <div class="dropdown-menu" aria-labelledby="dropdownMenuButton">
       <span class="dropdown-item"><small class="text-muted">Please check the "monthly" box</small></span>
-      <a class="dropdown-item" target="_blank" href="https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&amp;hosted_button_id=B9JZV25DCP2SJ&amp;source=url">Sponsor in $ USD</a>
-      <a class="dropdown-item" target="_blank" href="https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&amp;hosted_button_id=RGRFXCDDHK3LW&amp;source=url">Sponsor in £ GBP</a>
-      <a class="dropdown-item" target="_blank" href="https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&amp;hosted_button_id=Y2AMZXSALFBR4&amp;source=url">Sponsor in € EUR</a>
+      <a class="dropdown-item" target="_blank" rel="noopener" href="https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&amp;hosted_button_id=B9JZV25DCP2SJ&amp;source=url">Sponsor in $ USD</a>
+      <a class="dropdown-item" target="_blank" rel="noopener" href="https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&amp;hosted_button_id=RGRFXCDDHK3LW&amp;source=url">Sponsor in £ GBP</a>
+      <a class="dropdown-item" target="_blank" rel="noopener" href="https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&amp;hosted_button_id=Y2AMZXSALFBR4&amp;source=url">Sponsor in € EUR</a>
     </div>
   </div>
-  <a  class="btn btn-primary" role="button" href="https://patreon.com/njcw/" target="_blank"><i class="fab fa-patreon" aria-hidden="true"></i> Patreon</a>
-  <a  class="btn btn-primary" role="button" href="https://liberapay.com/ncw/" target="_blank">Liberapay</a>
+  <a  class="btn btn-primary" role="button" href="https://patreon.com/njcw/" target="_blank" rel="noopener"><i class="fab fa-patreon" aria-hidden="true"></i> Patreon</a>
+  <a  class="btn btn-primary" role="button" href="https://liberapay.com/ncw/" target="_blank" rel="noopener">Liberapay</a>
 </div>
diff --git a/docs/layouts/shortcodes/one_off_donations.html b/docs/layouts/shortcodes/one_off_donations.html
index 5f8997211..5bc09d647 100644
--- a/docs/layouts/shortcodes/one_off_donations.html
+++ b/docs/layouts/shortcodes/one_off_donations.html
@@ -4,19 +4,19 @@
       <i class="fab fa-paypal" aria-hidden="true"></i> PayPal
     </a>
     <div class="dropdown-menu" aria-labelledby="dropdownMenuButton">
-      <a class="dropdown-item" target="_blank" href="https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&amp;hosted_button_id=B9JZV25DCP2SJ&amp;source=url">Sponsor in $ USD</a>
-      <a class="dropdown-item" target="_blank" href="https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&amp;hosted_button_id=RGRFXCDDHK3LW&amp;source=url">Sponsor in £ GBP</a>
-      <a class="dropdown-item" target="_blank" href="https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&amp;hosted_button_id=Y2AMZXSALFBR4&amp;source=url">Sponsor in € EUR</a>
+      <a class="dropdown-item" target="_blank" rel="noopener" href="https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&amp;hosted_button_id=B9JZV25DCP2SJ&amp;source=url">Sponsor in $ USD</a>
+      <a class="dropdown-item" target="_blank" rel="noopener" href="https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&amp;hosted_button_id=RGRFXCDDHK3LW&amp;source=url">Sponsor in £ GBP</a>
+      <a class="dropdown-item" target="_blank" rel="noopener" href="https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&amp;hosted_button_id=Y2AMZXSALFBR4&amp;source=url">Sponsor in € EUR</a>
     </div>
   </div>
-  <a  class="btn btn-primary" role="button" href="https://www.paypal.me/nickcw" target="_blank"><i class="fab fa-paypal" aria-hidden="true"></i> PayPal.Me</a>
+  <a  class="btn btn-primary" role="button" href="https://www.paypal.me/nickcw" target="_blank" rel="noopener"><i class="fab fa-paypal" aria-hidden="true"></i> PayPal.Me</a>
   <div class="dropdown" style="display: inline;">
     <a class="btn btn-primary dropdown-toggle" href="#" role="button" id="dropdownMenuButton" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">
       <i class="fab fa-bitcoin" aria-hidden="true"></i> Bitcoin
     </a>
     <div class="dropdown-menu" aria-labelledby="dropdownMenuButton">
       <span class="dropdown-item">Bitcoin: scan or click the image or copy the address</span>
-      <a class="dropdown-item" target="_blank" href="bitcoin:19j3oLUsqBcTRvZ2LSq2phVjsAAJ86xSnk"><img src="/img/ncw-bitcoin-address.png" alt="bitcoin:19j3oLUsqBcTRvZ2LSq2phVjsAAJ86xSnk"></a>
+      <a class="dropdown-item" target="_blank" rel="noopener" href="bitcoin:19j3oLUsqBcTRvZ2LSq2phVjsAAJ86xSnk"><img src="/img/ncw-bitcoin-address.png" alt="bitcoin:19j3oLUsqBcTRvZ2LSq2phVjsAAJ86xSnk"></a>
       <span class="dropdown-item">
         <input type="text" value="19j3oLUsqBcTRvZ2LSq2phVjsAAJ86xSnk" size="30" readonly>
         <button class="btn btn-primary copy-to-clipboard" type="button" data-toggle="tooltip" data-placement="button" title="Copy to Clipboard"><i class="fas fa-copy" aria-hidden="true"></i></button></span>
diff --git a/docs/layouts/shortcodes/provider.html b/docs/layouts/shortcodes/provider.html
index d81dc1eb5..792591e65 100644
--- a/docs/layouts/shortcodes/provider.html
+++ b/docs/layouts/shortcodes/provider.html
@@ -3,7 +3,7 @@
     {{ .Get "name" }}{{ if .Get "note"}} (<a href="{{ .Get "config" }}{{ .Get "note" }}">See note</a>){{end}}
   </span>
   <span>
-    <a class="badge badge-primary badge-pill" role="button btn-sm" href="{{ .Get "home" }}" target="_blank"><i class="fa fa-home" aria-hidden="true"></i> Home</a>
+    <a class="badge badge-primary badge-pill" role="button btn-sm" href="{{ .Get "home" }}" target="_blank" rel="noopener"><i class="fa fa-home" aria-hidden="true"></i> Home</a>
     <a class="badge badge-primary badge-pill" role="button btn-sm" href="{{ .Get "config" }}"><i class="fa fa-book" aria-hidden="true"></i> Config</a>
   </span>
 </li>
diff --git a/docs/layouts/shortcodes/sponsor.html b/docs/layouts/shortcodes/sponsor.html
index bde5f8cb2..30c5052d1 100644
--- a/docs/layouts/shortcodes/sponsor.html
+++ b/docs/layouts/shortcodes/sponsor.html
@@ -1,3 +1,3 @@
-<a href="{{ .Get "link" }}" target="_blank" >
+<a href="{{ .Get "link" }}" target="_blank" rel="noopener">
 <img width="{{ .Get "width" }}" src="{{ .Get "src" }}" title="{{ .Get "title" }}" styleX="{{ .Get "style" | safeCSS }}" style="margin: 2px; padding: 1px; border: 1px solid #ddd; border-radius: 4px;">
 </a>