add rel=noreferrer to external product-card link (tabnabbing hardening)

c2b90603d843ee4423f6902ebda90c70e978c96d · 2026-05-19 15:13:52 -0700 · Steve Abrams

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Files touched

M public/index.html

Diff

commit c2b90603d843ee4423f6902ebda90c70e978c96d
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Tue May 19 15:13:52 2026 -0700

    add rel=noreferrer to external product-card link (tabnabbing hardening)
    
    Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 public/index.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/public/index.html b/public/index.html
index 8598b37..835d2a4 100644
--- a/public/index.html
+++ b/public/index.html
@@ -396,7 +396,7 @@ function card(p) {
   const handle = encodeURIComponent(p.handle || p.sku || '');
   const url = p.product_url || ('https://designerwallcoverings.com/products/' + handle);
   const sample = '/sample/' + handle;
-  return `<a class="card" href="${url}" target="_blank" rel="noopener">
+  return `<a class="card" href="${url}" target="_blank" rel="noopener noreferrer">
     <img loading="lazy" src="${p.image_url}" alt="${(p.title || '').replace(/"/g, '&quot;')}">
     <div class="overlay">
       <div class="pat">${p.title || ''}</div>

← 0315bb3 untrack .bak snapshots + .gitignore catch-all + Express 404- · back to Bleachresistantfabrics · add: pre-stage Meta Pixel snippet (placeholder; flip via _dw 9b4bf07 →