From aa7f7e9a118b5afc2fb266bdd4bacfd57c431d3e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Anders=20F=20Bj=C3=B6rklund?= <anders.f.bjorklund@gmail.com>
Date: Mon, 12 Apr 2021 18:00:10 +0200
Subject: [PATCH] Address concerns highlighted by code scanning

---
 site/layouts/partials/community_links.html | 2 +-
 site/static/js/tabs.js                     | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/site/layouts/partials/community_links.html b/site/layouts/partials/community_links.html
index 06d94af178..09ecf1ff6c 100644
--- a/site/layouts/partials/community_links.html
+++ b/site/layouts/partials/community_links.html
@@ -27,7 +27,7 @@
 <ul>
  {{ range . }}
  <li title="{{ .name }}">
-   <a target="_blank" href="{{ .url }}"><i class="{{ .icon }}"></i> {{ .name }}:</a> {{ .desc }}
+   <a target="_blank" rel="noopener" href="{{ .url }}"><i class="{{ .icon }}"></i> {{ .name }}:</a> {{ .desc }}
  </li>
   {{ end }}
 </ul>
diff --git a/site/static/js/tabs.js b/site/static/js/tabs.js
index 4ff11430ad..1cd97571d4 100644
--- a/site/static/js/tabs.js
+++ b/site/static/js/tabs.js
@@ -3,8 +3,8 @@ function initTabs() {
   try{
     $('.tab-content').find('.tab-pane').each(function(idx, item) {
       var navTabs = $(this).closest('.code-tabs').find('.nav-tabs'),
-          title = $(this).attr('title'),
-          os = $(this).attr('os');
+          title = escape($(this).attr('title')),
+          os = escape($(this).attr('os'));
       navTabs.append('<li class="nav-tab '+os+'"><a href="#" class="nav-tab">'+title+'</a></li>');
     });