add rel=noreferrer to external target=_blank links

75729fd0b4af6e8b06a407b776f8c2c6273a0366 · 2026-05-19 17:21:31 -0700 · SteveStudio2

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Files touched

M public/index.html
M public/wall.html

Diff

commit 75729fd0b4af6e8b06a407b776f8c2c6273a0366
Author: SteveStudio2 <steve@designerwallcoverings.com>
Date:   Tue May 19 17:21:31 2026 -0700

    add rel=noreferrer to external target=_blank links
    
    Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 public/index.html | 2 +-
 public/wall.html  | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/public/index.html b/public/index.html
index 697ed07..7b0a797 100644
--- a/public/index.html
+++ b/public/index.html
@@ -342,7 +342,7 @@
             <span class="domain-pill" id="hero-domain">—</span>
             <span class="hint" id="hero-hint">2×2 hero on this site. Drop products into the squares — each drop publishes to the live front page.</span>
             <span class="push-status" id="push-status"></span>
-            <a id="open-live" class="live-hero-toggle" target="_blank" rel="noopener">View live ↗</a>
+            <a id="open-live" class="live-hero-toggle" target="_blank" rel="noopener noreferrer">View live ↗</a>
             <button class="live-hero-toggle" id="hero-toggle">hide preview</button>
           </div>
           <div class="hero-canvas-wrap">
diff --git a/public/wall.html b/public/wall.html
index af32b9d..23b0610 100644
--- a/public/wall.html
+++ b/public/wall.html
@@ -208,7 +208,7 @@
         '<div class="card-domain">' +
           '<span class="dot"></span>' +
           '<span>' + esc(s.domain) + '</span>' +
-          '<a class="live" href="https://' + esc(s.domain) + '/?fsq=' + Date.now() + '" target="_blank" rel="noopener" onclick="event.stopPropagation()">View live ↗</a>' +
+          '<a class="live" href="https://' + esc(s.domain) + '/?fsq=' + Date.now() + '" target="_blank" rel="noopener noreferrer" onclick="event.stopPropagation()">View live ↗</a>' +
           '<span class="card-status">' + (isOK ? '✓ hero set' : '· needs hero') + '</span>' +
         '</div>' +
       '</div>';

← bc6abcd /api/all-hero-grids: discover heroes on disk (not just wired · back to 4square Agentabrams · guard static root against .bak/.pre-* snapshot paths c834d76 →