mirror of
https://github.com/zulip/zulip.git
synced 2026-07-09 21:21:47 +08:00
We fixed the main issue of this form in CVE-2020-9444, but the audit done at that time only included links found in rendered_markdown; this change completes our audit for links with target=_blank anywhere in the codebase.
8 lines
218 B
Handlebars
8 lines
218 B
Handlebars
<div>
|
|
{{#unless zulip_plan_is_not_limited}}
|
|
<a href="/upgrade" class="upgrade-tip" target="_blank" rel="noopener noreferrer">
|
|
{{upgrade_text_for_wide_organization_logo}}
|
|
</a>
|
|
{{/unless}}
|
|
</div>
|