Merge pull request #25 from panorama-ed/SECZ-1715-Add-LinkToBlank

SECZ-1715: Add Rails/LinkToBlank
panorama-ed · Sep 10, 2024 · 87c583d · 87c583d
2 parents b1892c5 + 265c95a
commit 87c583d
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/panolint-rails-rubocop.yml b/panolint-rails-rubocop.yml
@@ -27,5 +27,11 @@ AllCops:
     - "db/migrate/**/*"
   NewCops: enable
 
+# This mitigates this vulnerability:
+# https://owasp.org/www-community/attacks/Reverse_Tabnabbing
+# While this is resolved in modern browsers, not all users have modern browsers
+Rails/LinkToBlank:
+  Enabled: true
+
 Rails/I18nLocaleTexts:
   Enabled: false