diff --git a/adminer/include/editing.inc.php b/adminer/include/editing.inc.php
index b9ca4147..7ec5dbb6 100644
--- a/adminer/include/editing.inc.php
+++ b/adminer/include/editing.inc.php
@@ -43,7 +43,7 @@ function select($result, $connection2 = null, $href = "") {
 				}
 				$types[$j] = $field->type;
 				$name = h($field->name);
-				echo "<th" . ($orgtable != "" || $field->name != $orgname ? " title='" . h(($orgtable != "" ? "$orgtable." : "") . $orgname) . "'" : "") . ">" . ($href ? "<a href='$href" . strtolower($name) . "' target='_blank'>$name</a>" : $name);
+				echo "<th" . ($orgtable != "" || $field->name != $orgname ? " title='" . h(($orgtable != "" ? "$orgtable." : "") . $orgname) . "'" : "") . ">" . ($href ? "<a href='$href" . strtolower($name) . "' target='_blank' rel='noreferrer'>$name</a>" : $name);
 			}
 			echo "</thead>\n";
 		}
diff --git a/adminer/static/editing.js b/adminer/static/editing.js
index a855d08d..a9775df8 100644
--- a/adminer/static/editing.js
+++ b/adminer/static/editing.js
@@ -10,7 +10,7 @@ function bodyLoad(version, protocol) {
 	script.src = jushRoot + 'jush.js';
 	script.onload = function () {
 		if (window.jush) { // IE runs in case of an error too
-			jush.create_links = ' target="_blank"';
+			jush.create_links = ' target="_blank" rel="noreferrer"';
 			jush.urls.sql[0] = 'http://dev.mysql.com/doc/refman/' + version + '/en/$key';
 			jush.urls.sql_sqlset = jush.urls.sql[0];
 			jush.urls.sqlset[0] = jush.urls.sql[0];
diff --git a/adminer/user.inc.php b/adminer/user.inc.php
index 677e6736..c4f74b52 100644
--- a/adminer/user.inc.php
+++ b/adminer/user.inc.php
@@ -127,7 +127,7 @@ if ($_POST) {
 <?php
 //! MAX_* limits, REQUIRE
 echo "<table cellspacing='0'>\n";
-echo "<thead><tr><th colspan='2'><a href='http://dev.mysql.com/doc/refman/" . substr($connection->server_info, 0, 3) . "/en/grant.html'>" . lang('Privileges') . "</a>";
+echo "<thead><tr><th colspan='2'><a href='http://dev.mysql.com/doc/refman/" . substr($connection->server_info, 0, 3) . "/en/grant.html#priv_level' target='_blank' rel='noreferrer'>" . lang('Privileges') . "</a>";
 $i = 0;
 foreach ($grants as $object => $grant) {
 	echo '<th>' . ($object != "*.*" ? "<input name='objects[$i]' value='" . h($object) . "' size='10'>" : "<input type='hidden' name='objects[$i]' value='*.*' size='10'>*.*"); //! separate db, table, columns, PROCEDURE|FUNCTION, routine