From 52e2950aa9b115d2301d9c56125a7de27a9fed42 Mon Sep 17 00:00:00 2001
From: JonnyWong16 <9099342+JonnyWong16@users.noreply.github.com>
Date: Thu, 18 Apr 2024 10:06:21 -0700
Subject: [PATCH] Add no-referrer policy

---
 data/interfaces/default/base.html    |  1 +
 data/interfaces/default/login.html   |  1 +
 data/interfaces/default/support.html |  2 +-
 data/interfaces/default/welcome.html |  1 +
 plexpy/notifiers.py                  | 13 +++++++------
 5 files changed, 11 insertions(+), 7 deletions(-)

diff --git a/data/interfaces/default/base.html b/data/interfaces/default/base.html
index 6ef08805..5ff448b8 100644
--- a/data/interfaces/default/base.html
+++ b/data/interfaces/default/base.html
@@ -13,6 +13,7 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <meta name="description" content="">
     <meta name="author" content="">
+    <meta name="referrer" content="no-referrer">
     <link href="${http_root}css/bootstrap3/bootstrap.min.css" rel="stylesheet">
     <link href="${http_root}css/pnotify.custom.min.css" rel="stylesheet" />
     <link href="${http_root}css/selectize.bootstrap3.css" rel="stylesheet" />
diff --git a/data/interfaces/default/login.html b/data/interfaces/default/login.html
index 63b48deb..f8179fd1 100644
--- a/data/interfaces/default/login.html
+++ b/data/interfaces/default/login.html
@@ -11,6 +11,7 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <meta name="description" content="">
     <meta name="author" content="">
+    <meta name="referrer" content="no-referrer">
     <link href="${http_root}css/bootstrap3/bootstrap.min.css" rel="stylesheet">
     <link href="${http_root}css/tautulli.css${cache_param}" rel="stylesheet">
     <link href="${http_root}css/opensans.min.css" rel="stylesheet">
diff --git a/data/interfaces/default/support.html b/data/interfaces/default/support.html
index ab874fad..658fcf61 100644
--- a/data/interfaces/default/support.html
+++ b/data/interfaces/default/support.html
@@ -30,7 +30,7 @@
         <div class="iframe-container">
             <iframe class="iframe" allowfullscreen="true" id="support-iframe" data-name="Tautulli-Support" data-src="https://support.tautulli.com"
                     sandbox="allow-presentation allow-forms allow-same-origin allow-pointer-lock allow-scripts allow-popups allow-modals allow-top-navigation"
-                    style="display: none;">
+                    style="display: none;" rel="noreferrer">
             </iframe>
             <div class="iframe-overlay">
                 <div class="iframe-button-container">
diff --git a/data/interfaces/default/welcome.html b/data/interfaces/default/welcome.html
index e67deb49..39fc19b4 100644
--- a/data/interfaces/default/welcome.html
+++ b/data/interfaces/default/welcome.html
@@ -12,6 +12,7 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <meta name="description" content="">
     <meta name="author" content="">
+    <meta name="referrer" content="no-referrer">
     <link href="${http_root}css/bootstrap3/bootstrap.min.css" rel="stylesheet">
     <link href="${http_root}css/bootstrap-wizard.css" rel="stylesheet">
     <link href="${http_root}css/tautulli.css${cache_param}" rel="stylesheet">
diff --git a/plexpy/notifiers.py b/plexpy/notifiers.py
index d871e679..4d7c9735 100644
--- a/plexpy/notifiers.py
+++ b/plexpy/notifiers.py
@@ -2004,7 +2004,8 @@ class IFTTT(Notifier):
                           'value': self.config['key'],
                           'name': 'ifttt_key',
                           'description': 'Your IFTTT webhook key. You can get a key from'
-                                         ' <a href="' + helpers.anon_url('https://ifttt.com/maker_webhooks') + '" target="_blank">here</a>.',
+                                         ' <a href="' + helpers.anon_url('https://ifttt.com/maker_webhooks') +
+                                         '" target="_blank" rel="noreferrer">here</a>.',
                           'input_type': 'token'
                           },
                          {'label': 'IFTTT Event',
@@ -3893,7 +3894,7 @@ class TAUTULLIREMOTEAPP(Notifier):
                                'Instructions can be found in the '
                                '<a href="' + helpers.anon_url(
                                  'https://github.com/%s/%s/wiki/Frequently-Asked-Questions#notifications-pycryptodome'
-                                 % (plexpy.CONFIG.GIT_USER, plexpy.CONFIG.GIT_REPO)) + '" target="_blank">FAQ</a>.' ,
+                                 % (plexpy.CONFIG.GIT_USER, plexpy.CONFIG.GIT_REPO)) + '" target="_blank" rel="noreferrer">FAQ</a>.' ,
                 'input_type': 'help'
             })
         else:
@@ -3905,10 +3906,10 @@ class TAUTULLIREMOTEAPP(Notifier):
             })
 
         config_option[-1]['description'] += ('<br><br>Notifications are sent using '
-            '<a href="' + helpers.anon_url('https://onesignal.com') + '" target="_blank">'
+            '<a href="' + helpers.anon_url('https://onesignal.com') + '" target="_blank" rel="noreferrer">'
             'OneSignal</a>. Some user data is collected and cannot be encrypted.<br>'
             'Please read the <a href="' + helpers.anon_url(
-                'https://onesignal.com/privacy_policy') + '" target="_blank">'
+                'https://onesignal.com/privacy_policy') + '" target="_blank" rel="noreferrer">'
             'OneSignal Privacy Policy</a> for more details.')
 
         devices = self.get_devices()
@@ -4057,7 +4058,7 @@ class TELEGRAM(Notifier):
                           'name': 'telegram_bot_token',
                           'description': 'Your Telegram bot token. '
                                          'Contact <a href="' + helpers.anon_url('https://telegram.me/BotFather') +
-                                         '" target="_blank">@BotFather</a>'
+                                         '" target="_blank" rel="noreferrer">@BotFather</a>'
                                          ' on Telegram to get one.',
                           'input_type': 'token'
                           },
@@ -4066,7 +4067,7 @@ class TELEGRAM(Notifier):
                           'name': 'telegram_chat_id',
                           'description': 'Your Telegram Chat ID, Group ID, Channel ID or @channelusername. '
                                          'Contact <a href="' + helpers.anon_url('https://telegram.me/myidbot') +
-                                         '" target="_blank">@myidbot</a>'
+                                         '" target="_blank" rel="noreferrer">@myidbot</a>'
                                          ' on Telegram to get an ID. '
                                          'For a group topic, append <span class="inline-pre">/topicID</span> to the group ID.',
                           'input_type': 'text'