From c0da5ed7d9f78d5de5c9bcd9b010cb653e0a6415 Mon Sep 17 00:00:00 2001
From: Aevann1 <randomname42029@gmail.com>
Date: Sat, 11 Jun 2022 11:53:53 +0200
Subject: [PATCH] make twitter links have "nofollow noopener norefeerrer"

---
 files/routes/posts.py | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/files/routes/posts.py b/files/routes/posts.py
index 803105c79..8d94a4655 100644
--- a/files/routes/posts.py
+++ b/files/routes/posts.py
@@ -857,7 +857,9 @@ def submit_post(v, sub=None):
 			reason = f"Remove the {domain_obj.domain} link from your post and try again. {domain_obj.reason}"
 			return error(reason)
 		elif "twitter.com" == domain:
-			try: embed = requests.get("https://publish.twitter.com/oembed", params={"url":url, "omit_script":"t"}, timeout=5).json()["html"]
+			try:
+				embed = requests.get("https://publish.twitter.com/oembed", params={"url":url, "omit_script":"t"}, timeout=5).json()["html"]
+				embed = embed.replace('<a href', '<a rel="nofollow noopener noreferrer" href')
 			except: pass
 		elif url.startswith('https://youtube.com/watch?v='):
 			url = unquote(url).replace('?t', '&t')