Add noreferrer noopener to window.open calls

issue9089

src/action.js

@@ -133,7 +133,7 @@
                 Sao.Action.exec_report(params);
                 return;
             case 'ir.action.url':
-                window.open(action.url, '_blank');
+                window.open(action.url, '_blank', 'noreferrer,noopener');
                 return;
         }
     };

src/sao.js

@@ -530,7 +530,7 @@ var Sao = {};
                 return;
             }
             if (url) {
-                window.open(url, '_blank');
+                window.open(url, '_blank', 'noreferrer,noopener');
             }
         }
 

src/view/form.js

@@ -4037,7 +4037,7 @@ function eval_pyson(value){
             });
             Sao.common.selection(Sao.i18n.gettext("Choose a language"), options)
             .done(function(language) {
-                window.open(this.uri(language), '_blank');
+                window.open(this.uri(language), '_blank', 'noreferrer,noopener');
             }.bind(this));
         },
     });