links: add noreferrer to all target=_blank rel attributes

56770ccaf59ec76285a1d7d87d4db504941ed81b · 2026-05-19 18:40:12 -0700 · SteveStudio2

Files touched

M public/competitors.html
M public/hub.html
M public/trademark.html

Diff

commit 56770ccaf59ec76285a1d7d87d4db504941ed81b
Author: SteveStudio2 <steve@designerwallcoverings.com>
Date:   Tue May 19 18:40:12 2026 -0700

    links: add noreferrer to all target=_blank rel attributes
---
 public/competitors.html | 2 +-
 public/hub.html         | 2 +-
 public/trademark.html   | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/public/competitors.html b/public/competitors.html
index 00a1dcc9..677464a2 100644
--- a/public/competitors.html
+++ b/public/competitors.html
@@ -58,7 +58,7 @@ function md2html(src) {
     .replace(/`([^`]+)`/g, '<code>$1</code>')
     .replace(/\*\*([^*]+)\*\*/g, '<strong>$1</strong>')
     .replace(/\*([^*]+)\*/g, '<em>$1</em>')
-    .replace(/\[([^\]]+)\]\(([^)]+)\)/g, '<a href="$2" target="_blank" rel="noopener">$1</a>');
+    .replace(/\[([^\]]+)\]\(([^)]+)\)/g, '<a href="$2" target="_blank" rel="noopener noreferrer">$1</a>');
   for (const raw of lines) {
     const line = raw.trimEnd();
     if (/^---+$/.test(line)) { closeP(); closeLists(); html += '<hr>'; continue; }
diff --git a/public/hub.html b/public/hub.html
index 53bc6ca7..e29b5843 100644
--- a/public/hub.html
+++ b/public/hub.html
@@ -79,7 +79,7 @@ function render(){
       ${byCat[cat].map(s => `
         <div class="source">
           <div>
-            <div class="nm"><a href="${esc(s.url)}" target="_blank" rel="noopener">${esc(s.name)}</a></div>
+            <div class="nm"><a href="${esc(s.url)}" target="_blank" rel="noopener noreferrer">${esc(s.name)}</a></div>
             <div class="desc">${esc(s.description)}</div>
             <div class="url">${esc(s.url)}</div>
           </div>
diff --git a/public/trademark.html b/public/trademark.html
index 7fe03f2b..90e35cd7 100644
--- a/public/trademark.html
+++ b/public/trademark.html
@@ -88,7 +88,7 @@ fetch('/api/trademark').then(r=>r.json()).then(tm => {
         <span class="fee">$${r.fee_per_class_usd}/class</span>
       </div>
       <p class="notes">${escapeHtml(r.notes)}</p>
-      <a class="btn" href="${escapeHtml(r.url)}" target="_blank" rel="noopener">GO →</a>
+      <a class="btn" href="${escapeHtml(r.url)}" target="_blank" rel="noopener noreferrer">GO →</a>
     </div>
   `).join('');

← a124b915 404-guard: also block .orig .rej .swp .swo and ~-suffixed pa · back to Abrams · tick: refresh inventory + SWOT at 2026-05-23T04:30:04Z 8cf017ac →