From dc01891634c73d430e44ae54b58a4e5765e8ee78 Mon Sep 17 00:00:00 2001
From: dag <me@dvikan.no>
Date: Fri, 8 Apr 2022 23:14:43 +0200
Subject: [PATCH] fix: enclosure link privacy (#2620)

---
 formats/HtmlFormat.php | 8 +++-----
 1 file changed, 3 insertions(+), 5 deletions(-)

diff --git a/formats/HtmlFormat.php b/formats/HtmlFormat.php
index d995aae6..b9a7aba1 100644
--- a/formats/HtmlFormat.php
+++ b/formats/HtmlFormat.php
@@ -67,13 +67,11 @@ class HtmlFormat extends FormatAbstract {
 				$entryEnclosures = '<div class="attachments"><p>Attachments:</p>';
 
 				foreach($item->getEnclosures() as $enclosure) {
+					$template = '<li class="enclosure"><a href="%s" rel="noopener noreferrer nofollow">%s</a></li>';
 					$url = $this->sanitizeHtml($enclosure);
+					$anchorText = substr($url, strrpos($url, '/') + 1);
 
-					$entryEnclosures .= '<li class="enclosure"><a href="'
-					. $url
-					. '">'
-					. substr($url, strrpos($url, '/') + 1)
-					. '</a></li>';
+					$entryEnclosures .= sprintf($template, $url, $anchorText);
 				}
 
 				$entryEnclosures .= '</div>';