Add rel noopener, noreferrer to links

app/assets/javascripts/vue_shared/components/markdown/toolbar.vue

@@ -24,8 +24,8 @@ export default {
   },
   computed: {
     toolbarHelpHtml() {
-      const mdLinkStart = `<a href="${this.markdownDocsPath}" target="_blank" tabindex="-1">`;
-      const actionsLinkStart = `<a href="${this.quickActionsDocsPath}" target="_blank" tabindex="-1">`;
+      const mdLinkStart = `<a href="${this.markdownDocsPath}" target="_blank" rel="noopener noreferrer" tabindex="-1">`;
+      const actionsLinkStart = `<a href="${this.quickActionsDocsPath}" target="_blank" rel="noopener noreferrer" tabindex="-1">`;
       const linkEnd = '</a>';
 
       if (this.markdownDocsPath && !this.quickActionsDocsPath) {

app/views/shared/notes/_hints.html.haml

 - supports_quick_actions = local_assigns.fetch(:supports_quick_actions, false)
 .comment-toolbar.clearfix
   .toolbar-text
-    - md_link_start = '<a href="%{url}" target="_blank" tabindex="-1">'.html_safe % { url: help_page_path('user/markdown') }
-    - actions_link_start = '<a href="%{url}" target="_blank" tabindex="-1">'.html_safe % { url: help_page_path('user/project/quick_actions') }
+    - md_link_start = '<a href="%{url}" target="_blank" rel="noopener noreferrer" tabindex="-1">'.html_safe % { url: help_page_path('user/markdown') }
+    - actions_link_start = '<a href="%{url}" target="_blank" rel="noopener noreferrer" tabindex="-1">'.html_safe % { url: help_page_path('user/project/quick_actions') }
     - link_end = '</a>'.html_safe
     - if supports_quick_actions
       = s_('Editor|%{mdLinkStart}Markdown%{mdLinkEnd} and %{actionsLinkStart}quick actions%{actionsLinkEnd} are supported').html_safe % { mdLinkStart: md_link_start, mdLinkEnd: link_end, actionsLinkStart: actions_link_start, actionsLinkEnd: link_end }