From dd58645150fd0c7dfa23fa55ebd36e2f53640d28 Mon Sep 17 00:00:00 2001
From: Antoine B <antoine.bastos@edu.univ-eiffel.fr>
Date: Thu, 13 Jun 2024 17:13:47 +0200
Subject: [PATCH] link noopener

---
 templates/web/pages/org_form/org_form.tt.html        | 2 +-
 templates/web/pages/user_form/user_form_page.tt.html | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/templates/web/pages/org_form/org_form.tt.html b/templates/web/pages/org_form/org_form.tt.html
index 6d26e8f5e3089..318dad34032ae 100644
--- a/templates/web/pages/org_form/org_form.tt.html
+++ b/templates/web/pages/org_form/org_form.tt.html
@@ -129,7 +129,7 @@ <h2>[% lang("organization_members") %]</h2>
 						<label for="[% field.field %]">[% field.label %]</label>
 						<div class="open-in-crm">
 							<input type="text" id="[% field.field %]" name="[% field.field %]" value="[% field.value %]"/>
-							<a type="button" class="button" id="crm_button" href="[% crm_company_url %]" target="_blank">[% lang("open_in_crm") %]</a> 
+							<a type="button" class="button" id="crm_button" href="[% crm_company_url %]" target="_blank" rel="noopener">[% lang("open_in_crm") %]</a> 
 						</div>
 					[% ELSIF field.type == 'text' %]
 						<label for="[% field.field %]">[% field.label %]</label>
diff --git a/templates/web/pages/user_form/user_form_page.tt.html b/templates/web/pages/user_form/user_form_page.tt.html
index a186549ce79b6..86bc49e40f5ba 100644
--- a/templates/web/pages/user_form/user_form_page.tt.html
+++ b/templates/web/pages/user_form/user_form_page.tt.html
@@ -69,7 +69,7 @@
                         <label for="[% field.field %]">[% field.label %]</label>
                         <div class="open-in-crm">
                             <input type="text" id="[% field.field %]" name="[% field.field %]" value="[% field.value %]"/>
-                            <a type="button" class="button" id="crm_button" href="[% crm_contact_url %]" target="_blank">[% lang("open_in_crm") %]</a> 
+                            <a type="button" class="button" id="crm_button" href="[% crm_contact_url %]" target="_blank" rel="noopener">[% lang("open_in_crm") %]</a> 
                         </div>
 					[% ELSIF field.field == 'userid' %]
                         [% IF type == 'edit' %]