From 1eefad649b6daed2e40303b6b3e28a2f1e58b15e Mon Sep 17 00:00:00 2001
From: Seth Vargo <sethvargo@gmail.com>
Date: Fri, 22 Apr 2016 23:24:42 -0400
Subject: [PATCH] Do not allow referrer modification

http://mathiasbynens.github.io/rel-noopener/
---
 website/source/downloads.html.erb | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/website/source/downloads.html.erb b/website/source/downloads.html.erb
index ccfd5a118..dd3c967dc 100644
--- a/website/source/downloads.html.erb
+++ b/website/source/downloads.html.erb
@@ -24,8 +24,8 @@ description: |-
       <a href="https://releases.hashicorp.com/vagrant/<%= latest_version %>/vagrant_<%= latest_version %>_SHA256SUMS.sig">
         verify the checksums signature file
       </a>
-      which has been signed using <a href="https://www.hashicorp.com/security.html" target="_TOP">HashiCorp's GPG key</a>.
-      You can also <a href="https://releases.hashicorp.com/vagrant/" target="_TOP">download older versions of Vagrant</a> from the releases service.
+      which has been signed using <a href="https://www.hashicorp.com/security.html" target="_blank" rel="nofollow noopener noreferrer">HashiCorp's GPG key</a>.
+      You can also <a href="https://releases.hashicorp.com/vagrant/" target="_blank" rel="nofollow noopener noreferrer">download older versions of Vagrant</a> from the releases service.
     </p>
   </div>
 
@@ -48,7 +48,7 @@ description: |-
   <% end %>
 
   <div class="poweredby">
-    <a href="https://www.fastly.com?utm_source=hashicorp" target="_TOP">
+    <a href="https://www.fastly.com?utm_source=hashicorp" target="_blank" rel="nofollow noopener noreferrer">
       <%= image_tag "fastly_logo.png" %>
     </a>
   </div>