From eaf648ea050548744a1d94b0a4a9dab00df4db61 Mon Sep 17 00:00:00 2001
From: Keegan George <kgeorge13@gmail.com>
Date: Tue, 8 Jun 2021 15:54:43 -0700
Subject: [PATCH] FIX: Security vulnerabilities with _blank anchor link

---
 .../discourse/templates/admin-wizards.hbs          | 14 +++++++++++---
 1 file changed, 11 insertions(+), 3 deletions(-)

diff --git a/assets/javascripts/discourse/templates/admin-wizards.hbs b/assets/javascripts/discourse/templates/admin-wizards.hbs
index 594564a1..364106fe 100644
--- a/assets/javascripts/discourse/templates/admin-wizards.hbs
+++ b/assets/javascripts/discourse/templates/admin-wizards.hbs
@@ -1,17 +1,25 @@
 {{#admin-nav}}
   {{nav-item route="adminWizardsWizard" label="admin.wizard.nav_label"}}
-  {{nav-item route="adminWizardsCustomFields" label="admin.wizard.custom_field.nav_label"}}
-  {{nav-item route="adminWizardsSubmissions" label="admin.wizard.submissions.nav_label"}}
+  {{nav-item
+    route="adminWizardsCustomFields"
+    label="admin.wizard.custom_field.nav_label"
+  }}
+  {{nav-item
+    route="adminWizardsSubmissions"
+    label="admin.wizard.submissions.nav_label"
+  }}
   {{#if siteSettings.wizard_apis_enabled}}
     {{nav-item route="adminWizardsApi" label="admin.wizard.api.nav_label"}}
   {{/if}}
   {{nav-item route="adminWizardsLogs" label="admin.wizard.log.nav_label"}}
-  {{nav-item route="adminWizardsManager" label="admin.wizard.manager.nav_label"}}
+  {{nav-item route="adminWizardsManager" label="admin.wizard.manager.nav_label"
+  }}
 
   <div class="admin-actions">
     <a
       target="_blank"
       class="btn-primary btn btn-icon-text"
+      rel="noreferrer noopener"
       href={{
         i18n "admin.wizard.support_button.url" name=wizard.support_button.url
       }}