mirror of
https://github.com/zulip/zulip.git
synced 2025-10-23 04:52:12 +00:00
We fixed the main issue of this form in CVE-2020-9444, but the audit done at that time only included links found in rendered_markdown; this change completes our audit for links with target=_blank anywhere in the codebase.