onebox 1.9.26 → 1.9.28.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 84aac5ae01b5513e3f3f24ab5dcef3ea04fce6f760acd88439cbab7aa0155232
-  data.tar.gz: 48e36383d31afec9d40ac32194756107c911de597596a9b3231967c6a22b8462
+  metadata.gz: b2bb566d2096445a37f5328daab6bd9750c8fa75ce8740b7f2f858f56c9aa795
+  data.tar.gz: 1f4ce2ee9e5255a0889c3019649a9a34802a3b4d7c7d4494ab3425d98566d471
 SHA512:
-  metadata.gz: 275d1316c48338b60eab191e076117619fd9ecb0f944cc88429151316df7fab10fd2251035ddbda5a0dd711700d75aa9c19490d42ad41c295e799c7a38168625
-  data.tar.gz: d89cbca0ea276ed3c6c7d6b96e72763e42cbbd3c14e249c6516601b78e6239b78c24136dbaa628de9b42c246dc0ecfb576eb6a57eee7473b0991ea67d0b6778d
+  metadata.gz: 5e48b7a4787c335b9eefba80baa1b49d19e394b3a05ab1c43ed30fc176e5d0021a301ddbedcbf8d5a1e02649fadb41d8cd62d8668b3d0d62e030effffc667453
+  data.tar.gz: 8fbb2770d5ffa95e3efed6fb24c5f15468b659392e40bb5532abe7e7d4a677678dd2705e354efb8f33e4622c7608dac21bd6f446145a342c6683ec47d6cff178

data/.github/workflows/ci.yml

@@ -49,6 +49,6 @@ jobs:
       - uses: actions/checkout@v2
 
       - name: Release Gem
-        uses: cadwallion/publish-rubygems-action@5dfdb61
+        uses: CvX/publish-rubygems-action@master
         env:
           RUBYGEMS_API_KEY: ${{secrets.RUBYGEMS_API_KEY}}

data/.rubocop.yml

@@ -1 +1,2 @@
-inherit_from: https://raw.githubusercontent.com/discourse/discourse/master/.rubocop.yml
+inherit_gem:
+  rubocop-discourse: default.yml

data/lib/onebox/engine.rb

@@ -176,5 +176,6 @@ require_relative "engine/instagram_onebox"
 require_relative "engine/gitlab_blob_onebox"
 require_relative "engine/google_photos_onebox"
 require_relative "engine/kaltura_onebox"
-require_relative "engine/reddit_image_onebox"
+require_relative "engine/reddit_media_onebox"
 require_relative "engine/google_drive_onebox"
+require_relative "engine/facebook_media_onebox"

data/lib/onebox/engine/cloudapp_onebox.rb

@@ -25,7 +25,7 @@ module Onebox
 
       def link_html(og)
         <<-HTML
-            <a href='#{og.url}' target='_blank'>
+            <a href='#{og.url}' target='_blank' rel='noopener'>
               #{og.title}
             </a>
           HTML
@@ -43,7 +43,7 @@ module Onebox
 
       def image_html(og)
         <<-HTML
-            <a href='#{og.url}' target='_blank' class='onebox'>
+            <a href='#{og.url}' target='_blank' class='onebox' rel='noopener'>
               <img src='#{og.image}' #{og.title_attr} alt='CloudApp' width='480'>
             </a>
           HTML

data/lib/onebox/engine/facebook_media_onebox.rb

@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+module Onebox
+  module Engine
+    class FacebookMediaOnebox
+      include Engine
+      include StandardEmbed
+
+      matches_regexp(/^https?:\/\/.*\.facebook\.com\/(\w+)\/(videos|\?).*/)
+      always_https
+
+      def to_html
+        metadata = get_twitter
+        if metadata.present? && metadata[:card] == "player" && metadata[:player].present?
+          <<-HTML
+            <iframe src="#{metadata[:player]}"
+                    width="#{metadata[:player_width]}"
+                    height="#{metadata[:player_height]}"
+                    scrolling="no"
+                    frameborder="0"
+                    allowfullscreen>
+            </iframe>
+          HTML
+        else
+          html = Onebox::Engine::WhitelistedGenericOnebox.new(@url, @timeout).to_html
+          return if Onebox::Helpers.blank?(html)
+          html
+        end
+      end
+    end
+  end
+end

data/lib/onebox/engine/flickr_onebox.rb

@@ -26,7 +26,7 @@ module Onebox
 
         <<-HTML
             <div class='onebox flickr-album'>
-              <a href='#{escaped_url}' target='_blank'>
+              <a href='#{escaped_url}' target='_blank' rel='noopener'>
                 <span class='outer-box' style='max-width:#{og.image_width}px'>
                   <span class='inner-box'>
                     <span class='album-title'>#{album_title}</span>
@@ -42,7 +42,7 @@ module Onebox
         escaped_url = ::Onebox::Helpers.normalize_url_for_output(url)
 
         <<-HTML
-            <a href='#{escaped_url}' target='_blank' class="onebox">
+            <a href='#{escaped_url}' target='_blank' rel='noopener' class="onebox">
               <img src='#{og.get_secure_image}' #{og.title_attr} alt='Imgur' height='#{og.image_height}' width='#{og.image_width}'>
             </a>
           HTML

data/lib/onebox/engine/giphy_onebox.rb

@@ -13,7 +13,7 @@ module Onebox
         oembed = get_oembed
 
         <<-HTML
-          <a href="#{oembed.url}" target="_blank" class="onebox">
+          <a href="#{oembed.url}" target="_blank" rel="noopener" class="onebox">
             <img src="#{oembed.url}" width="#{oembed.width}" height="#{oembed.height}" #{oembed.title_attr}>
           </a>
         HTML

data/lib/onebox/engine/google_photos_onebox.rb

@@ -33,7 +33,7 @@ module Onebox
 
         <<-HTML
             <div class='onebox google-photos-album'>
-              <a href='#{escaped_url}' target='_blank'>
+              <a href='#{escaped_url}' target='_blank' rel='noopener'>
                 <span class='outer-box' style='width:#{og.image_width}px'>
                   <span class='inner-box'>
                     <span class='album-title'>#{Onebox::Helpers.truncate(album_title, 80)}</span>
@@ -49,7 +49,7 @@ module Onebox
         escaped_url = ::Onebox::Helpers.normalize_url_for_output(url)
 
         <<-HTML
-            <a href='#{escaped_url}' target='_blank' class="onebox">
+            <a href='#{escaped_url}' target='_blank' rel='noopener' class="onebox">
               <img src='#{og.get_secure_image}' #{og.title_attr} alt='Google Photos' height='#{og.image_height}' width='#{og.image_width}'>
             </a>
           HTML

data/lib/onebox/engine/image_onebox.rb

@@ -19,7 +19,7 @@ module Onebox
 
         escaped_url = ::Onebox::Helpers.normalize_url_for_output(@url)
         <<-HTML
-          <a href="#{escaped_url}" target="_blank" class="onebox">
+          <a href="#{escaped_url}" target="_blank" rel="noopener" class="onebox">
             <img src="#{escaped_url}">
           </a>
         HTML

data/lib/onebox/engine/imgur_onebox.rb

@@ -34,7 +34,7 @@ module Onebox
 
         <<-HTML
             <div class='onebox imgur-album'>
-              <a href='#{escaped_url}' target='_blank'>
+              <a href='#{escaped_url}' target='_blank' rel='noopener'>
                 <span class='outer-box' style='width:#{og.image_width}px'>
                   <span class='inner-box'>
                     <span class='album-title'>#{album_title}</span>
@@ -57,7 +57,7 @@ module Onebox
         escaped_url = ::Onebox::Helpers.normalize_url_for_output(url)
 
         <<-HTML
-            <a href='#{escaped_url}' target='_blank' class="onebox">
+            <a href='#{escaped_url}' target='_blank' rel='noopener' class="onebox">
               <img src='#{og.get_secure_image}' #{og.title_attr} alt='Imgur' height='#{og.image_height}' width='#{og.image_width}'>
             </a>
           HTML

data/lib/onebox/engine/instagram_onebox.rb

@@ -1,7 +1,5 @@
 # frozen_string_literal: true
 
-require 'htmlentities'
-
 module Onebox
   module Engine
     class InstagramOnebox
@@ -9,25 +7,43 @@ module Onebox
       include StandardEmbed
       include LayoutSupport
 
-      matches_regexp(/^https?:\/\/(?:www\.)?(?:instagram\.com|instagr\.am)\/?(?:.*)\/p\//)
+      matches_regexp(/^https?:\/\/(?:www\.)?(?:instagram\.com|instagr\.am)\/?(?:.*)\/p\/[a-zA-Z\d_-]+/)
       always_https
 
-      def data
-        og = get_opengraph
-        title = og.title.split(":")[0].strip.gsub(" on Instagram", "")
-
-        json_data = html_doc.xpath('//script[contains(text(),"window._sharedData")]').text.to_s
-        title = "[Album] #{title}" if json_data =~ /"edge_sidecar_to_children"/
+      def clean_url
+        url.scan(/^https?:\/\/(?:www\.)?(?:instagram\.com|instagr\.am)\/?(?:.*)\/p\/[a-zA-Z\d_-]+/).flatten.first
+      end
 
-        result = { link: og.url,
-                   title: Onebox::Helpers.truncate(title, 80),
-                   description: og.description(250)
+      def data
+        oembed = get_oembed
+        permalink = clean_url.gsub("/#{oembed.author_name}/", "/")
+        description = oembed.title
+        type = if description =~ /^Photos by/
+          "album"
+        elsif description =~ /^Video by/
+          "video"
+        else
+          "photo"
+        end
+        title = if type == "album"
+          "[Album] @#{oembed.author_name}"
+        else
+          "@#{oembed.author_name}"
+        end
+
+        result = { link: permalink,
+                   title: title,
+                   image: "#{permalink}/media/?size=l",
+                   description: Onebox::Helpers.truncate(description, 250)
                   }
+        result[:video_link] = permalink if type == "video"
+        result
+      end
 
-        result[:image] = og.image if !og.image.nil?
-        result[:video_link] = og.url if !og.video_secure_url.nil?
+      protected
 
-        result
+      def get_oembed_url
+        oembed_url = "https://api.instagram.com/oembed/?url=#{clean_url}"
       end
     end
   end

data/lib/onebox/engine/{reddit_image_onebox.rb → reddit_media_onebox.rb}

@@ -2,7 +2,7 @@
 
 module Onebox
   module Engine
-    class RedditImageOnebox
+    class RedditMediaOnebox
       include Engine
       include StandardEmbed
 
@@ -25,6 +25,25 @@ module Onebox
               </article>
             </aside>
           HTML
+        elsif  raw[:type] =~ /^video[\/\.]/
+          <<-HTML
+            <aside class="onebox reddit">
+              <header class="source">
+                <img src="#{raw[:favicon]}" class="site-icon" width="16" height="16">
+                <a href="#{raw[:url]}" target="_blank" rel="nofollow ugc noopener">#{raw[:site_name]}</a>
+              </header>
+              <article class="onebox-body">
+                <h3><a href="#{raw[:url]}" target="_blank" rel="nofollow ugc noopener">#{raw[:title]}</a></h3>
+                <div class="aspect-image-full-size">
+                  <a href="#{raw[:url]}" target="_blank" rel="nofollow ugc noopener">
+                    <img src="#{raw[:image]}" class="scale-image"/>
+                    <span class="instagram-video-icon"></span>
+                  </a>
+                </div>
+                <div class="description"><p>#{raw[:description]}</p></div>
+              </article>
+            </aside>
+          HTML
         else
           html = Onebox::Engine::WhitelistedGenericOnebox.new(@url, @timeout).to_html
           return if Onebox::Helpers.blank?(html)

data/lib/onebox/engine/whitelisted_generic_onebox.rb

@@ -57,6 +57,7 @@ module Onebox
           ehow.com
           espn.go.com
           etsy.com
+          facebook.com
           findery.com
           folksy.com
           forbes.com
@@ -77,6 +78,7 @@ module Onebox
           kickstarter.com
           kinomap.com
           lessonplanet.com
+          linkedin.com
           liveleak.com
           livestream.com
           mashable.com

data/lib/onebox/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Onebox
-  VERSION = "1.9.26"
+  VERSION = "1.9.28.2"
 end

data/onebox.gemspec

@@ -28,13 +28,12 @@ Gem::Specification.new do |spec|
   spec.add_runtime_dependency 'sanitize'
 
   spec.add_development_dependency 'bundler', '~> 2.0'
-  spec.add_development_dependency 'rake', '~> 10.4'
+  spec.add_development_dependency 'rake', '>= 12.3.3'
   spec.add_development_dependency 'rspec', '~> 3.2'
   spec.add_development_dependency 'fakeweb', '~> 1.3'
   spec.add_development_dependency 'pry', '~> 0.10'
   spec.add_development_dependency 'mocha', '~> 1.1'
-  spec.add_development_dependency 'rubocop', '~> 0.78.0'
-  spec.add_development_dependency 'rubocop-discourse', '~> 1.0.1'
+  spec.add_development_dependency 'rubocop-discourse', '~> 2.1.2'
   spec.add_development_dependency 'twitter', '~> 4.8'
   spec.add_development_dependency 'guard-rspec', '~> 4.2.8'
   spec.add_development_dependency 'sinatra', '~> 1.4'

data/templates/_layout.mustache

@@ -4,10 +4,10 @@
       <img src="{{favicon}}" class="site-icon"/>
     {{/favicon}}
     {{#article_published_time}}
-      <a href="{{link}}" target='_blank' title="{{article_published_time_title}}">{{domain}} &ndash; {{article_published_time}}</a>
+      <a href="{{link}}" target='_blank' rel='noopener' title="{{article_published_time_title}}">{{domain}} &ndash; {{article_published_time}}</a>
     {{/article_published_time}}
     {{^article_published_time}}
-      <a href="{{link}}" target='_blank'>{{domain}}</a>
+      <a href="{{link}}" target='_blank' rel='noopener'>{{domain}}</a>
     {{/article_published_time}}
   </header>
   <article class="onebox-body">

data/templates/amazon.mustache

@@ -1,6 +1,6 @@
 {{#image}}<img src="{{image}}" class="thumbnail"/>{{/image}}
 
-<h3><a href='{{link}}' target='_blank'>{{title}}</a></h3>
+<h3><a href='{{link}}' target='_blank' rel='noopener'>{{title}}</a></h3>
 {{#by_info}}<b>{{by_info}}</b>{{/by_info}}
 <p>{{description}}</p>
 <p>

data/templates/githubblob.mustache

@@ -1,4 +1,4 @@
-<h4><a href="{{link}}" target="_blank">{{title}}</a></h4>
+<h4><a href="{{link}}" target="_blank" rel="noopener">{{title}}</a></h4>
 {{^has_lines}}
 {{#model_file}}
 <iframe class="render-viewer" width="{{width}}" height="{{height}}" src="{{content}}" sandbox="allow-scripts allow-same-origin allow-top-navigation ">
@@ -40,5 +40,5 @@ pre.onebox code li.selected{
 {{/has_lines}}
 
 {{#truncated}}
-  This file has been truncated. <a href="{{link}}" target="_blank">show original</a>
+  This file has been truncated. <a href="{{link}}" target="_blank" rel="noopener">show original</a>
 {{/truncated}}

data/templates/githubcommit.mustache

@@ -5,7 +5,7 @@
 
   <div class="github-info-container">
     <h4>
-      <a href="{{html_url}}" target="_blank">{{title}}</a>
+      <a href="{{html_url}}" target="_blank" rel="noopener">{{title}}</a>
     </h4>
 
     <div class="github-info">
@@ -14,7 +14,7 @@
       </div>
 
       <div class="user">
-        <a href="{{author.html_url}}" target="_blank">
+        <a href="{{author.html_url}}" target="_blank" rel="noopener">
           <img alt="{{author.login}}" src="{{author.avatar_url}}" class="onebox-avatar-inline" width="20" height="20">
           {{author.login}}
         </a>
@@ -22,7 +22,7 @@
       </div>
 
       <div class="lines" title="changed {{files.length}} files with {{stats.additions}} additions and {{stats.deletions}} deletions">
-        <a href="{{html_url}}" target="_blank">
+        <a href="{{html_url}}" target="_blank" rel="noopener">
           <span class="added">+{{stats.additions}}</span>
           <span class="removed">-{{stats.deletions}}</span>
         </a>

data/templates/githubgist.mustache

@@ -1,12 +1,12 @@
-<h4><a href="{{link}}" target="_blank">{{link}}</a></h4>
+<h4><a href="{{link}}" target="_blank" rel="noopener">{{link}}</a></h4>
 {{#gist_files}}
 <h5>{{filename}}</h5>
 <pre><code class='{{language}}'>{{content}}</code></pre>
-{{#truncated?}}This file has been truncated. <a href="{{link}}" target="_blank">show original</a>{{/truncated?}}
+{{#truncated?}}This file has been truncated. <a href="{{link}}" target="_blank" rel="noopener">show original</a>{{/truncated?}}
 {{/gist_files}}
 
 <p>
 {{#truncated_files?}}
-  There are more than three files. <a href="{{link}}" target="_blank">show original</a>
+  There are more than three files. <a href="{{link}}" target="_blank" rel="noopener">show original</a>
 {{/truncated_files?}}
 </p>

data/templates/githubissue.mustache

@@ -5,7 +5,7 @@
 
   <div class="github-info-container">
     <h4>
-      <a href="{{link}}" target="_blank">{{title}}</a>
+      <a href="{{link}}" target="_blank" rel="noopener">{{title}}</a>
     </h4>
 
     <div class="github-info">
@@ -20,7 +20,7 @@
       {{/closed_at}}
 
       <div class="user">
-        <a href="{{user.html_url}}" target="_blank">
+        <a href="{{user.html_url}}" target="_blank" rel="noopener">
           <img alt="{{user.login}}" src="{{user.avatar_url}}" class="onebox-avatar-inline" width="20" height="20">
           {{user.login}}
         </a>

data/templates/githubpullrequest.mustache

@@ -5,7 +5,7 @@
 
   <div class="github-info-container">
     <h4>
-      <a href="{{html_url}}" target="_blank">{{title}}</a>
+      <a href="{{html_url}}" target="_blank" rel="noopener">{{title}}</a>
     </h4>
 
     <div class="branches">
@@ -18,14 +18,14 @@
       </div>
 
       <div class="user">
-        <a href="{{user.html_url}}" target="_blank">
+        <a href="{{user.html_url}}" target="_blank" rel="noopener">
           <img alt="{{user.login}}" src="{{user.avatar_url}}" class="onebox-avatar-inline" width="20" height="20">
           {{user.login}}
         </a>
       </div>
 
       <div class="lines" title="{{commits}} commits changed {{changed_files}} files with {{additions}} additions and {{deletions}} deletions">
-        <a href="{{html_url}}/files" target="_blank">
+        <a href="{{html_url}}/files" target="_blank" rel="noopener">
           <span class="added">+{{additions}}</span>
           <span class="removed">-{{deletions}}</span>
         </a>
@@ -33,4 +33,4 @@
     </div>
 
   </div>
-</div>
+</div>

data/templates/gitlabblob.mustache

@@ -1,4 +1,4 @@
-<h4><a href="{{link}}" target="_blank">{{title}}</a></h4>
+<h4><a href="{{link}}" target="_blank" rel="noopener">{{title}}</a></h4>
 {{^has_lines}}
 <pre><code class='{{lang}}'>{{content}}</code></pre>
 {{/has_lines}}
@@ -10,5 +10,5 @@
 {{/has_lines}}
 
 {{#truncated}}
-  This file has been truncated. <a href="{{link}}" target="_blank">show original</a>
+  This file has been truncated. <a href="{{link}}" target="_blank" rel="noopener">show original</a>
 {{/truncated}}

data/templates/googledocs.mustache

@@ -1,5 +1,5 @@
-<a href='{{link}}' target="_blank"><span class='googledocs-onebox-logo g-{{type}}-logo'></span></a>
+<a href='{{link}}' target="_blank" rel="noopener"><span class='googledocs-onebox-logo g-{{type}}-logo'></span></a>
 
-<h3><a href='{{link}}' target="_blank">{{title}}</a></h3>
+<h3><a href='{{link}}' target="_blank" rel="noopener">{{title}}</a></h3>
 
 <p>{{description}}</p>

data/templates/googledrive.mustache

@@ -1,9 +1,9 @@
 {{^image}}
-  <a href='{{link}}' target="_blank"><span class='googledocs-onebox-logo g-drive-logo'></span></a>
+  <a href='{{link}}' target="_blank" rel="noopener"><span class='googledocs-onebox-logo g-drive-logo'></span></a>
 {{/image}}
 
 {{#image}}<img src="{{image}}" class="thumbnail"/>{{/image}}
 
-<h3><a href="{{link}}" target="_blank">{{title}}</a></h3>
+<h3><a href="{{link}}" target="_blank" rel="noopener">{{title}}</a></h3>
 
 <p>{{description}}</p>

data/templates/instagram.mustache

@@ -1,8 +1,8 @@
-<h3><a href="{{{link}}}" target="_blank">{{title}}</a></h3>
+<h3><a href="{{{link}}}" target="_blank" rel="noopener">{{title}}</a></h3>
 
 {{#image}}
   <div class="instagram-images">
-    {{#video_link}} <a href="{{{video_link}}}" target="_blank"> {{/video_link}}
+    {{#video_link}} <a href="{{{video_link}}}" target="_blank" rel="noopener"> {{/video_link}}
       <img class="instagram-image" src="{{{image}}}"/>
     {{#video_link}} <span class="instagram-video-icon"></span></a> {{/video_link}}
   </div>

data/templates/pastebin.mustache

@@ -1,3 +1,3 @@
-<h4><a href="{{link}}" target="_blank">{{link}}</a></h4>
+<h4><a href="{{link}}" target="_blank" rel="noopener">{{link}}</a></h4>
 <pre><code class='lang-auto'>{{content}}</code></pre>
-{{#truncated?}}This paste has been truncated. <a href="{{link}}" target="_blank">show original</a>{{/truncated?}}
+{{#truncated?}}This paste has been truncated. <a href="{{link}}" target="_blank" rel="noopener">show original</a>{{/truncated?}}

data/templates/pdf.mustache

@@ -1,4 +1,4 @@
-<a href='{{link}}' target="_blank"><span class='pdf-onebox-logo'></span></a>
-<h3><a href='{{link}}' target="_blank">{{title}}</a></h3>
+<a href='{{link}}' target="_blank" rel="noopener"><span class='pdf-onebox-logo'></span></a>
+<h3><a href='{{link}}' target="_blank" rel="noopener">{{title}}</a></h3>
 
 {{#filesize}}<p class='filesize'>{{filesize}}</p>{{/filesize}}

data/templates/pubmed.mustache

@@ -1,5 +1,5 @@
 <h4>
-  <a href="{{link}}" target="_blank">{{title}}</a>
+  <a href="{{link}}" target="_blank" rel="noopener">{{title}}</a>
 </h4>
 
 <div class="date">

data/templates/stackexchange.mustache

@@ -1,10 +1,10 @@
 {{#owner.profile_image}}
-  <a href="{{owner.link}}" target="_blank">
+  <a href="{{owner.link}}" target="_blank" rel="noopener">
     <img alt="{{owner.display_name}}" src="{{owner.profile_image}}" class="thumbnail onebox-avatar">
   </a>
 {{/owner.profile_image}}
 <h4>
-  <a href="{{link}}" target="_blank">{{{title}}}</a>
+  <a href="{{link}}" target="_blank" rel="noopener">{{{title}}}</a>
 </h4>
 
 <div class="tags">
@@ -14,8 +14,8 @@
 <div class="date">
   {{#is_question}}asked by{{/is_question}}
   {{#is_answer}}answered by{{/is_answer}}
-  <a href="{{owner.link}}" target="_blank">
+  <a href="{{owner.link}}" target="_blank" rel="noopener">
     {{owner.display_name}}
   </a>
-  on <a href="{{link}}" target="_blank">{{creation_date}}</a>
+  on <a href="{{link}}" target="_blank" rel="noopener">{{creation_date}}</a>
 </div>

data/templates/twitterstatus.mustache

@@ -1,11 +1,11 @@
 {{#avatar}}<img src="{{avatar}}" class="thumbnail onebox-avatar">{{/avatar}}
 
-<h4><a href='{{link}}' target='_blank'>{{title}}</a></h4>
+<h4><a href='{{link}}' target='_blank' rel='noopener'>{{title}}</a></h4>
 
 <div class="tweet"> {{{tweet}}}{{#quoted_tweet}}<div class="quoted"><a class="quoted-link" href="{{quoted_link}}"><p class="quoted-title">{{quoted_full_name}} <span>@{{quoted_screen_name}}</span></p></a><div>{{quoted_tweet}}</div></div>{{/quoted_tweet}}</div>
 
 <div class='date'>
-  <a href="{{link}}" target="_blank">{{timestamp}}</a>
+  <a href="{{link}}" target="_blank" rel="noopener">{{timestamp}}</a>
   {{#likes}}
     <span class="like">
       <svg viewBox="0 0 512 512" width="14px" height="16px" aria-hidden="true">

data/templates/wechatmp.mustache

@@ -1,4 +1,4 @@
-<h3><a href='{{link}}' target='_blank'>{{title}}</a></h3>
+<h3><a href='{{link}}' target='_blank' rel='noopener'>{{title}}</a></h3>
 {{#by_info}}<b>{{by_info}}</b>{{/by_info}}
 <p>{{description}}</p>
 

data/templates/whitelistedgeneric.mustache

@@ -1,6 +1,6 @@
 {{#image}}<img src="{{image}}" class="thumbnail"/>{{/image}}
 
-<h3><a href='{{link}}' target="_blank">{{title}}</a></h3>
+<h3><a href='{{link}}' target="_blank" rel="noopener">{{title}}</a></h3>
 
 <p>{{description}}</p>
 

data/templates/wikimedia.mustache

@@ -1,3 +1,3 @@
 {{#image}}<img src="{{image}}" class="thumbnail"/>{{/image}}
 
-<h3><a href='{{link}}' target='_blank'>{{title}}</a></h3>
+<h3><a href='{{link}}' target='_blank' rel='noopener'>{{title}}</a></h3>

data/templates/wikipedia.mustache

@@ -1,5 +1,5 @@
 {{#image}}<img src="{{image}}" class="thumbnail"/>{{/image}}
 
-<h3><a href='{{link}}' target='_blank'>{{title}}</a></h3>
+<h3><a href='{{link}}' target='_blank' rel='noopener'>{{title}}</a></h3>
 
 <p>{{description}}</p>

data/templates/xkcd.mustache

@@ -1,4 +1,4 @@
-<h3><a href='{{link}}' target='_blank'>{{title}}</a></h3>
+<h3><a href='{{link}}' target='_blank' rel='noopener'>{{title}}</a></h3>
 
 {{#image}}
   <div class="xkcd-image"><img src="{{image}}"/></div>

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: onebox
 version: !ruby/object:Gem::Version
-  version: 1.9.26
+  version: 1.9.28.2
 platform: ruby
 authors:
 - Joanna Zeta
@@ -10,7 +10,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-02-03 00:00:00.000000000 Z
+date: 2020-05-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: addressable
@@ -114,16 +114,16 @@ dependencies:
   name: rake
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '10.4'
+        version: 12.3.3
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '10.4'
+        version: 12.3.3
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
@@ -180,34 +180,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.1'
-- !ruby/object:Gem::Dependency
-  name: rubocop
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 0.78.0
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 0.78.0
 - !ruby/object:Gem::Dependency
   name: rubocop-discourse
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.0.1
+        version: 2.1.2
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.0.1
+        version: 2.1.2
 - !ruby/object:Gem::Dependency
   name: twitter
   requirement: !ruby/object:Gem::Requirement
@@ -321,6 +307,7 @@ files:
 - lib/onebox/engine/bandcamp_onebox.rb
 - lib/onebox/engine/cloudapp_onebox.rb
 - lib/onebox/engine/coub_onebox.rb
+- lib/onebox/engine/facebook_media_onebox.rb
 - lib/onebox/engine/five_hundred_px_onebox.rb
 - lib/onebox/engine/flickr_onebox.rb
 - lib/onebox/engine/flickr_shortened_onebox.rb
@@ -349,7 +336,7 @@ files:
 - lib/onebox/engine/pastebin_onebox.rb
 - lib/onebox/engine/pdf_onebox.rb
 - lib/onebox/engine/pubmed_onebox.rb
-- lib/onebox/engine/reddit_image_onebox.rb
+- lib/onebox/engine/reddit_media_onebox.rb
 - lib/onebox/engine/replit_onebox.rb
 - lib/onebox/engine/simplecast_onebox.rb
 - lib/onebox/engine/sketchfab_onebox.rb
@@ -433,7 +420,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.2
+rubygems_version: 3.0.3
 signing_key: 
 specification_version: 4
 summary: A gem for generating embeddable HTML previews from URLs.