From fff90e6ddb1e608b60ad5fcff3d59ff57ec2e611 Mon Sep 17 00:00:00 2001
From: Seth Vargo <sethvargo@gmail.com>
Date: Fri, 22 Apr 2016 23:37:55 -0400
Subject: [PATCH] Do not allow referrer to modify the sender

http://mathiasbynens.github.io/rel-noopener/
---
 website/source/downloads.html.erb | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/website/source/downloads.html.erb b/website/source/downloads.html.erb
index e5e219a58..d97b4e340 100644
--- a/website/source/downloads.html.erb
+++ b/website/source/downloads.html.erb
@@ -25,8 +25,8 @@ description: |-
         <a href="https://releases.hashicorp.com/nomad/<%= latest_version %>/nomad_<%= latest_version %>_SHA256SUMS.sig">
           verify the checksums signature file
         </a>
-        which has been signed using <a href="https://www.hashicorp.com/security.html" target="_TOP">HashiCorp's GPG key</a>.
-        You can also <a href="https://releases.hashicorp.com/nomad/" target="_TOP">download older versions of Nomad</a> from the releases service.
+        which has been signed using <a href="https://www.hashicorp.com/security.html" target="_blank" rel="nofollow noopener noreferrer">HashiCorp's GPG key</a>.
+        You can also <a href="https://releases.hashicorp.com/nomad/" target="_blank" rel="nofollow noopener noreferrer">download older versions of Nomad</a> from the releases service.
       </p>
     </div>
   </div>
@@ -51,7 +51,7 @@ description: |-
 
   <div class="row">
     <div class="col-md-12 poweredby">
-      <a href="https://www.fastly.com?utm_source=hashicorp" target="_TOP">
+      <a href="https://www.fastly.com?utm_source=hashicorp" target="_blank" rel="nofollow noopener noreferrer">
         <%= image_tag "fastly_logo.png" %>
       </a>
     </div>