fix: add noreferrer to external target=_blank links

20aecc2f92c12c9f0b7bfc4988bb7cb993e9c300 · 2026-05-19 08:00:41 -0700 · Steve Abrams

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Files touched

M server.js

Diff

commit 20aecc2f92c12c9f0b7bfc4988bb7cb993e9c300
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Tue May 19 08:00:41 2026 -0700

    fix: add noreferrer to external target=_blank links
    
    Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 server.js | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/server.js b/server.js
index 9fd1991..ead9d2c 100644
--- a/server.js
+++ b/server.js
@@ -248,8 +248,8 @@ ${HEADER_HTML()}
       <h1 class="detail-title">${p.title}</h1>
       <div class="detail-tags">${tags.slice(0,10).map(t=>`<span class="tag">${t}</span>`).join('')}</div>
       <div class="detail-ctas">
-        <a href="${p.sample_url}" class="btn btn-sample" target="_blank" rel="noopener">Order Memo Sample (free)</a>
-        <a href="${p.product_url}" class="btn btn-full" target="_blank" rel="noopener">View Full Product</a>
+        <a href="${p.sample_url}" class="btn btn-sample" target="_blank" rel="noopener noreferrer">Order Memo Sample (free)</a>
+        <a href="${p.product_url}" class="btn btn-full" target="_blank" rel="noopener noreferrer">View Full Product</a>
       </div>
       <div class="detail-service">
         <h3>Carmel Trade Service</h3>
@@ -442,7 +442,7 @@ function renderCard(p) {
         <p class="card-aesthetic">\${p.aesthetic}</p>
       </div>
     </a>
-    <a href="\${p.sample_url}" class="card-sample" target="_blank" rel="noopener" aria-label="Order free memo sample of \${p.title.replace(/"/g,'&quot;')}">Order Memo Sample (free)</a>
+    <a href="\${p.sample_url}" class="card-sample" target="_blank" rel="noopener noreferrer" aria-label="Order free memo sample of \${p.title.replace(/"/g,'&quot;')}">Order Memo Sample (free)</a>
   \`;
   return div;
 }

← 78e1c9d fix: 404-guard so .bak/.pre- snapshot paths never serve from · back to Carmelwallpapers · fix: wire vendor sort handler, add SKU option, drop dead Pri 5958e2e →