fix: harden external _blank links with noopener noreferrer

8202633b19a90f79f15c86cb5edb6bf5ce4ba082 · 2026-05-19 08:24:04 -0700 · SteveStudio2

Added noreferrer to the Facebook link rel and passed noopener,noreferrer
as the window.open feature string for the cross-site DW-universe nav.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Files touched

M public/index.html

Diff

commit 8202633b19a90f79f15c86cb5edb6bf5ce4ba082
Author: SteveStudio2 <steve@designerwallcoverings.com>
Date:   Tue May 19 08:24:04 2026 -0700

    fix: harden external _blank links with noopener noreferrer
    
    Added noreferrer to the Facebook link rel and passed noopener,noreferrer
    as the window.open feature string for the cross-site DW-universe nav.
    
    Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 public/index.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/public/index.html b/public/index.html
index 5ec63b9..9ff0427 100644
--- a/public/index.html
+++ b/public/index.html
@@ -356,7 +356,7 @@ textarea:focus-visible,
   
     <div class="footer-col">
       <h4>Social</h4>
-      <a class="fb-link" href="https://www.facebook.com/SteveAbramsDesigns.DesignerWallcoverings" target="_blank" rel="noopener">Facebook</a>
+      <a class="fb-link" href="https://www.facebook.com/SteveAbramsDesigns.DesignerWallcoverings" target="_blank" rel="noopener noreferrer">Facebook</a>
     </div>
   </div>
   <div class="footer-bottom">
@@ -424,7 +424,7 @@ textarea:focus-visible,
       const isCurrent = n.dataset.slug === SLUG;
       n.querySelector('circle').setAttribute('fill-opacity', isCurrent ? '1' : '0.55');
     });
-    n.addEventListener('click', () => window.open('https://' + n.dataset.slug + '.com', '_blank'));
+    n.addEventListener('click', () => window.open('https://' + n.dataset.slug + '.com', '_blank', 'noopener,noreferrer'));
   });
 })();
 </script>

← a55000d fix: remove dead /vocabulary nav link — no such page exists · back to 1920swallpaper · stage2: wire microsite catalog + admin CRUD + grid/list view c2da702 →