Improve security of visitUrl implementation -- part 2
What does this MR do and why?
Remove referrer information for external visits
Currently visitUrl
, only removes the referrer information when the
second parameter is true
. We have modified the logic to detect if the
URL is external and in those situation always remove the referrer
information.
In addition, we have changed the name of the second parameter to clarify that is to be used to open a new window/tab, independently if the URL is external or internal.
MR acceptance checklist
Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.
Screenshots or screen recordings
N/A
How to set up and validate locally
Edited by Eduardo Sanz García