Skip to content

Commit d9031d9

Browse files
aclark4lifeCopilot
aclark4life
and
Copilot
committed
Add rel="noopener noreferrer" to all target="_blank" links
Addresses Copilot's PR review flagging reverse-tabnabbing risk on external links across the docs list, showcase, footer, and history sections. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
1 parent 7a344e9 commit d9031d9

1 file changed

Lines changed: 40 additions & 40 deletions

File tree

‎index.html‎

Lines changed: 40 additions & 40 deletions
Original file line numberDiff line numberDiff line change
@@ -40,9 +40,9 @@
4040
</nav>
4141
<a class="btn btn-sponsor btn-sm" href="#sponsor">
4242
<i class="fas fa-heart"></i>Sponsor</a>
43-
<a class="icon-link" target="_blank" href="https://github.com/python-pillow/Pillow" aria-label="GitHub">
43+
<a class="icon-link" target="_blank" rel="noopener noreferrer" href="https://github.com/python-pillow/Pillow" aria-label="GitHub">
4444
<i class="fab fa-github"></i></a>
45-
<a class="icon-link" target="_blank" href="https://fosstodon.org/@pillow" rel="me" aria-label="Mastodon">
45+
<a class="icon-link" target="_blank" href="https://fosstodon.org/@pillow" rel="me noopener noreferrer" aria-label="Mastodon">
4646
<i class="fab fa-mastodon"></i></a>
4747
</div>
4848
</div>
@@ -59,8 +59,8 @@ <h1>Pillow</h1>
5959
interpreter &mdash; open, edit, and save many different image file formats
6060
with a simple, well-documented API.</p>
6161
<div class="hero-actions">
62-
<a class="btn btn-primary btn-lg" target="_blank" rel="noopener" href="https://pypi.org/project/pillow/">Download from PyPI</a>
63-
<a class="btn btn-outline btn-lg" target="_blank" rel="noopener" href="https://pillow.readthedocs.io/">Read the docs</a>
62+
<a class="btn btn-primary btn-lg" target="_blank" rel="noopener noreferrer" href="https://pypi.org/project/pillow/">Download from PyPI</a>
63+
<a class="btn btn-outline btn-lg" target="_blank" rel="noopener noreferrer" href="https://pillow.readthedocs.io/">Read the docs</a>
6464
<a class="btn btn-sponsor btn-lg" href="#sponsor">
6565
<i class="fas fa-heart"></i>Sponsor</a>
6666
</div>
@@ -81,29 +81,29 @@ <h2>Project</h2>
8181
<div class="info-item">
8282
<h3>Documentation</h3>
8383
<p>
84-
Our <a target="_blank" href="https://pillow.readthedocs.io/">documentation</a> is hosted by Read the Docs and includes
85-
<a target="_blank" href="https://pillow.readthedocs.io/en/stable/installation.html">installation instructions</a>,
86-
<a target="_blank" href="https://pillow.readthedocs.io/en/stable/handbook/index.html">handbook</a>,
87-
<a target="_blank" href="https://pillow.readthedocs.io/en/stable/reference/index.html">API reference</a> and
88-
<a target="_blank" href="https://pillow.readthedocs.io/en/stable/releasenotes/index.html">release notes</a>.
84+
Our <a target="_blank" rel="noopener noreferrer" href="https://pillow.readthedocs.io/">documentation</a> is hosted by Read the Docs and includes
85+
<a target="_blank" rel="noopener noreferrer" href="https://pillow.readthedocs.io/en/stable/installation.html">installation instructions</a>,
86+
<a target="_blank" rel="noopener noreferrer" href="https://pillow.readthedocs.io/en/stable/handbook/index.html">handbook</a>,
87+
<a target="_blank" rel="noopener noreferrer" href="https://pillow.readthedocs.io/en/stable/reference/index.html">API reference</a> and
88+
<a target="_blank" rel="noopener noreferrer" href="https://pillow.readthedocs.io/en/stable/releasenotes/index.html">release notes</a>.
8989
</p>
9090
</div>
9191
<div class="info-item">
9292
<h3>Discussion</h3>
9393
<p>
9494
Discussion about Pillow development, programming and technical issues occurs on
95-
<a target="_blank" href="https://github.com/python-pillow/Pillow/issues">GitHub</a>,
96-
<a target="_blank" href="https://stackoverflow.com/questions/tagged/python-imaging-library">Stack Overflow</a> and
97-
<a target="_blank" href="https://gitter.im/python-pillow/Pillow">Gitter</a>.
95+
<a target="_blank" rel="noopener noreferrer" href="https://github.com/python-pillow/Pillow/issues">GitHub</a>,
96+
<a target="_blank" rel="noopener noreferrer" href="https://stackoverflow.com/questions/tagged/python-imaging-library">Stack Overflow</a> and
97+
<a target="_blank" rel="noopener noreferrer" href="https://gitter.im/python-pillow/Pillow">Gitter</a>.
9898
</p>
9999
</div>
100100
<div class="info-item">
101101
<h3>Source Code</h3>
102102
<p>
103-
Our <a target="_blank" href="https://github.com/python-pillow/Pillow">source code</a> is hosted by GitHub and tested on
104-
<a target="_blank" href="https://github.com/python-pillow/Pillow/actions">GitHub Actions</a> and
105-
<a target="_blank" href="https://codecov.io/gh/python-pillow/Pillow">Codecov</a>, and uploaded to the
106-
<a target="_blank" href="https://pypi.org/project/pillow">Python Package Index</a>.
103+
Our <a target="_blank" rel="noopener noreferrer" href="https://github.com/python-pillow/Pillow">source code</a> is hosted by GitHub and tested on
104+
<a target="_blank" rel="noopener noreferrer" href="https://github.com/python-pillow/Pillow/actions">GitHub Actions</a> and
105+
<a target="_blank" rel="noopener noreferrer" href="https://codecov.io/gh/python-pillow/Pillow">Codecov</a>, and uploaded to the
106+
<a target="_blank" rel="noopener noreferrer" href="https://pypi.org/project/pillow">Python Package Index</a>.
107107
</p>
108108
</div>
109109
</div>
@@ -129,7 +129,7 @@ <h2><i class="fas fa-heart"></i> Support Pillow's Future</h2>
129129
<div class="sponsor-chip"><i class="fas fa-users"></i>Sustain the maintainers who ship Pillow</div>
130130
</div>
131131
<div style="text-align: center;">
132-
<a class="btn btn-sponsor-light btn-lg" target="_blank" href="https://github.com/sponsors/python-pillow">
132+
<a class="btn btn-sponsor-light btn-lg" target="_blank" rel="noopener noreferrer" href="https://github.com/sponsors/python-pillow">
133133
<i class="fas fa-heart"></i>Become a GitHub Sponsor</a>
134134
</div>
135135
</div>
@@ -147,7 +147,7 @@ <h2>For Enterprise</h2>
147147
dependencies you use to build your applications. Save time, reduce risk, and improve
148148
code health, while paying the maintainers of the exact dependencies you use.
149149
</p>
150-
<a target="_blank"
150+
<a target="_blank" rel="noopener noreferrer"
151151
class="btn btn-ink"
152152
href="https://www.sonarsource.com/solutions/security/?tidelift=tidelift-redirect&utm_source=pypi-pillow&utm_medium=referral&utm_campaign=enterprise&utm_term=repo">
153153
Learn More</a>
@@ -168,31 +168,31 @@ <h2>Powering the Python ecosystem</h2>
168168
<div class="case-item">
169169
<h3><i class="fas fa-square"></i>Django</h3>
170170
<p>
171-
The <a target="_blank" href="https://www.djangoproject.com/">Django</a> web
171+
The <a target="_blank" rel="noopener noreferrer" href="https://www.djangoproject.com/">Django</a> web
172172
framework uses Pillow to validate and introspect uploaded images for its
173173
built-in <code>ImageField</code>.
174174
</p>
175175
</div>
176176
<div class="case-item">
177177
<h3><i class="fas fa-square"></i>Wagtail</h3>
178178
<p>
179-
<a target="_blank" href="https://wagtail.org/">Wagtail</a>, the popular
179+
<a target="_blank" rel="noopener noreferrer" href="https://wagtail.org/">Wagtail</a>, the popular
180180
Django-based CMS, depends on Pillow to generate the image renditions and
181181
thumbnails used throughout its admin and templates.
182182
</p>
183183
</div>
184184
<div class="case-item">
185185
<h3><i class="fas fa-square"></i>Home Assistant</h3>
186186
<p>
187-
<a target="_blank" href="https://www.home-assistant.io/">Home Assistant</a>
187+
<a target="_blank" rel="noopener noreferrer" href="https://www.home-assistant.io/">Home Assistant</a>
188188
uses Pillow to process camera snapshots and generate thumbnails across its
189189
smart home integrations.
190190
</p>
191191
</div>
192192
<div class="case-item">
193193
<h3><i class="fas fa-square"></i>Matplotlib</h3>
194194
<p>
195-
<a target="_blank" href="https://matplotlib.org/">Matplotlib</a>, the widely
195+
<a target="_blank" rel="noopener noreferrer" href="https://matplotlib.org/">Matplotlib</a>, the widely
196196
used plotting library, uses Pillow to read and write image formats such as
197197
JPEG when saving figures.
198198
</p>
@@ -230,9 +230,9 @@ <h2>From PIL to <span class="highlight">Pillow</span></h2>
230230
</div>
231231
<div class="timeline-item">
232232
<span class="index">2020</span>
233-
<p>Following the <a target="_blank" href="https://peps.python.org/pep-0541/">PEP 541</a>
233+
<p>Following the <a target="_blank" rel="noopener noreferrer" href="https://peps.python.org/pep-0541/">PEP 541</a>
234234
package abandonment process, PyPI moderators
235-
<a target="_blank" href="https://github.com/python-pillow/Pillow/issues/1535#issuecomment-570308446">declare the original PIL package officially abandoned</a>,
235+
<a target="_blank" rel="noopener noreferrer" href="https://github.com/python-pillow/Pillow/issues/1535#issuecomment-570308446">declare the original PIL package officially abandoned</a>,
236236
confirming Pillow as its de facto successor.</p>
237237
</div>
238238
<div class="timeline-item">
@@ -246,11 +246,11 @@ <h2>From PIL to <span class="highlight">Pillow</span></h2>
246246

247247
<!-- In memory -->
248248
<div class="memory">
249-
<a target="_blank" href="https://pillow.readthedocs.io/en/stable/releasenotes/9.0.0.html#fredrik-lundh">In memory of Fredrik Lundh</a>
249+
<a target="_blank" rel="noopener noreferrer" href="https://pillow.readthedocs.io/en/stable/releasenotes/9.0.0.html#fredrik-lundh">In memory of Fredrik Lundh</a>
250250
<p class="memory-note">
251-
<a target="_blank" href="https://pillow.readthedocs.io/en/stable/releasenotes/9.0.0.html#">Pillow 9.0.0</a> was dedicated to the memory of Fredrik Lundh, aka Effbot, who died in
251+
<a target="_blank" rel="noopener noreferrer" href="https://pillow.readthedocs.io/en/stable/releasenotes/9.0.0.html#">Pillow 9.0.0</a> was dedicated to the memory of Fredrik Lundh, aka Effbot, who died in
252252
November 2021. Fredrik created PIL in 1995 and was instrumental in the
253-
<a target="_blank" href="https://mail.python.org/archives/list/python-dev@python.org/thread/36Q5QBILL3QIFIA3KHNGFBNJQKXKN7SD/">early success of Python</a>.
253+
<a target="_blank" rel="noopener noreferrer" href="https://mail.python.org/archives/list/python-dev@python.org/thread/36Q5QBILL3QIFIA3KHNGFBNJQKXKN7SD/">early success of Python</a>.
254254
</p>
255255
</div>
256256
</main>
@@ -266,43 +266,43 @@ <h2>From PIL to <span class="highlight">Pillow</span></h2>
266266
</a>
267267
<p>The Python Imaging Library, maintained by a community of volunteers since 2010.</p>
268268
<div class="footer-social">
269-
<a class="icon-link" target="_blank" href="https://github.com/python-pillow/Pillow" aria-label="GitHub">
269+
<a class="icon-link" target="_blank" rel="noopener noreferrer" href="https://github.com/python-pillow/Pillow" aria-label="GitHub">
270270
<i class="fab fa-github"></i></a>
271-
<a class="icon-link" target="_blank" href="https://fosstodon.org/@pillow" rel="me" aria-label="Mastodon">
271+
<a class="icon-link" target="_blank" href="https://fosstodon.org/@pillow" rel="me noopener noreferrer" aria-label="Mastodon">
272272
<i class="fab fa-mastodon"></i></a>
273273
</div>
274274
</div>
275275
<div class="footer-col">
276276
<h4>Project</h4>
277277
<ul>
278-
<li><a target="_blank" href="https://pillow.readthedocs.io/">Documentation</a></li>
279-
<li><a target="_blank" href="https://pillow.readthedocs.io/en/stable/releasenotes/index.html">Release notes</a></li>
280-
<li><a target="_blank" href="https://github.com/python-pillow/Pillow">Source code</a></li>
281-
<li><a target="_blank" href="https://pypi.org/project/pillow/">PyPI package</a></li>
278+
<li><a target="_blank" rel="noopener noreferrer" href="https://pillow.readthedocs.io/">Documentation</a></li>
279+
<li><a target="_blank" rel="noopener noreferrer" href="https://pillow.readthedocs.io/en/stable/releasenotes/index.html">Release notes</a></li>
280+
<li><a target="_blank" rel="noopener noreferrer" href="https://github.com/python-pillow/Pillow">Source code</a></li>
281+
<li><a target="_blank" rel="noopener noreferrer" href="https://pypi.org/project/pillow/">PyPI package</a></li>
282282
</ul>
283283
</div>
284284
<div class="footer-col">
285285
<h4>Community</h4>
286286
<ul>
287-
<li><a target="_blank" href="https://github.com/python-pillow/Pillow/issues">GitHub issues</a></li>
288-
<li><a target="_blank" href="https://stackoverflow.com/questions/tagged/python-imaging-library">Stack Overflow</a></li>
289-
<li><a target="_blank" href="https://gitter.im/python-pillow/Pillow">Gitter</a></li>
290-
<li><a target="_blank" href="https://github.com/python-pillow/Pillow/graphs/contributors">Contributors</a></li>
287+
<li><a target="_blank" rel="noopener noreferrer" href="https://github.com/python-pillow/Pillow/issues">GitHub issues</a></li>
288+
<li><a target="_blank" rel="noopener noreferrer" href="https://stackoverflow.com/questions/tagged/python-imaging-library">Stack Overflow</a></li>
289+
<li><a target="_blank" rel="noopener noreferrer" href="https://gitter.im/python-pillow/Pillow">Gitter</a></li>
290+
<li><a target="_blank" rel="noopener noreferrer" href="https://github.com/python-pillow/Pillow/graphs/contributors">Contributors</a></li>
291291
</ul>
292292
</div>
293293
<div class="footer-col footer-sponsor">
294294
<h4><i class="fas fa-heart"></i> Support Pillow</h4>
295295
<p>Pillow is maintained by volunteers. Sponsorship funds security fixes, reviews and new features.</p>
296-
<a class="btn btn-sponsor btn-sm" target="_blank" href="https://github.com/sponsors/python-pillow">Become a Sponsor</a>
296+
<a class="btn btn-sponsor btn-sm" target="_blank" rel="noopener noreferrer" href="https://github.com/sponsors/python-pillow">Become a Sponsor</a>
297297
</div>
298298
</div>
299299
<div class="wrap footer-bottom">
300300
<p>
301301
&copy; 1995-2011 Fredrik Lundh and contributors. &copy; 2010-2024 Jeffrey 'Alex' Clark and
302-
<a target="_blank" href="https://github.com/python-pillow/Pillow/graphs/contributors">contributors</a>.
302+
<a target="_blank" rel="noopener noreferrer" href="https://github.com/python-pillow/Pillow/graphs/contributors">contributors</a>.
303303
Logo by Alastair Houghton. Psychedelic art by Jeremy Kun.
304304
</p>
305-
<a target="_blank" href="https://github.com/python-pillow/python-pillow.github.io">Site source</a>
305+
<a target="_blank" rel="noopener noreferrer" href="https://github.com/python-pillow/python-pillow.github.io">Site source</a>
306306
</div>
307307
</footer>
308308

0 commit comments

Comments
 (0)