Merge pull request #11079 from afbjorklund/javascript-security

Address concerns highlighted by code scanning

site/layouts/partials/community_links.html

@@ -27,7 +27,7 @@
 <ul>
  {{ range . }}
  <li title="{{ .name }}">
-   <a target="_blank" href="{{ .url }}"><i class="{{ .icon }}"></i> {{ .name }}:</a> {{ .desc }}
+   <a target="_blank" rel="noopener" href="{{ .url }}"><i class="{{ .icon }}"></i> {{ .name }}:</a> {{ .desc }}
  </li>
   {{ end }}
 </ul>

site/static/js/tabs.js

@@ -3,8 +3,8 @@ function initTabs() {
   try{
     $('.tab-content').find('.tab-pane').each(function(idx, item) {
       var navTabs = $(this).closest('.code-tabs').find('.nav-tabs'),
-          title = $(this).attr('title'),
-          os = $(this).attr('os');
+          title = escape($(this).attr('title')),
+          os = escape($(this).attr('os'));
       navTabs.append('<li class="nav-tab '+os+'"><a href="#" class="nav-tab">'+title+'</a></li>');
     });