Skip to content

Improve security of visitUrl implementation -- part 2

What does this MR do and why?

Remove referrer information for external visits

Currently visitUrl, only removes the referrer information when the second parameter is true. We have modified the logic to detect if the URL is external and in those situation always remove the referrer information.

In addition, we have changed the name of the second parameter to clarify that is to be used to open a new window/tab, independently if the URL is external or internal.

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Screenshots or screen recordings

N/A

How to set up and validate locally

Edited by Eduardo Sanz García

Merge request reports