diff --git a/adminer/include/functions.inc.php b/adminer/include/functions.inc.php index d328f65f..b93ad710 100644 --- a/adminer/include/functions.inc.php +++ b/adminer/include/functions.inc.php @@ -1107,9 +1107,9 @@ function select_value($val, $link, $field, $text_length) { $link = "mailto:$val"; } if ($protocol = is_url($val)) { - $link = ($protocol == "http" && $HTTPS + $link = (($protocol == "http" && $HTTPS) || preg_match('~WebKit~i', $_SERVER["HTTP_USER_AGENT"]) // WebKit supports noreferrer since 2009 ? $val // HTTP links from HTTPS pages don't receive Referer automatically - : "$protocol://www.adminer.org/redirect/?url=" . urlencode($val) // intermediate page to hide Referer, may be changed to rel="noreferrer" in HTML5 + : "$protocol://www.adminer.org/redirect/?url=" . urlencode($val) // intermediate page to hide Referer ); } } diff --git a/changes.txt b/changes.txt index b2a4c78e..e68ce840 100644 --- a/changes.txt +++ b/changes.txt @@ -7,7 +7,8 @@ Trim trailing non-breaking spaces in SQL textarea Display time of the select command Print elapsed time in HTML instead of SQL command comment Improve gzip export ratio (bug #387) -Fix enum types in routines (bug #391) +Use rel="noreferrer" for external links, skip adminer.org redirect in WebKit +MySQL: Fix enum types in routines (bug #391) MySQL: Fix editing rows by binary values, bug since Adminer 3.7.1 MySQL: Respect daylight saving time in dump, bug since Adminer 3.6.4 MySQL 5.6.5+: Support ON UPDATE on datatime column