Add noopener,noreferrer to external window.open dashboard link

b3aa255ea57c4dde1a3ea8d96de26c1e4600a636 · 2026-05-19 21:41:56 -0700 · Steve Abrams

The "View Full Dashboard" button opens an external origin in a new
tab; passing the features string blocks the opened context from
reaching back via window.opener and strips Referer.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Files touched

M server.js

Diff

commit b3aa255ea57c4dde1a3ea8d96de26c1e4600a636
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Tue May 19 21:41:56 2026 -0700

    Add noopener,noreferrer to external window.open dashboard link
    
    The "View Full Dashboard" button opens an external origin in a new
    tab; passing the features string blocks the opened context from
    reaching back via window.opener and strips Referer.
    
    Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 server.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server.js b/server.js
index bed039a..910acfd 100644
--- a/server.js
+++ b/server.js
@@ -460,7 +460,7 @@ app.get('/', (req, res) => {
         </div>
 
         <div style="text-align: center;">
-            <button class="btn" onclick="window.open('http://45.61.58.125:3030', '_blank')">
+            <button class="btn" onclick="window.open('http://45.61.58.125:3030', '_blank', 'noopener,noreferrer')">
                 📊 View Full Dashboard
             </button>
             <button class="btn" onclick="resetTracking()">

← af55711 Add 404-guard middleware for .bak/.pre- snapshot paths · back to YOLO Progress Viewer · Clean up .gitignore and broaden snapshot-file patterns 45f5b19 →