[object Object]

← back to Chinoiseriewallpaper

add noreferrer to every target=_blank link

e041ec6c8a31356bef87d42978dc979621e02daa · 2026-05-25 20:54:51 -0700 · Steve Abrams

Tabnabbing + referrer-leak hardening across both static HTML and JS-built
product cards. 8 links upgraded from rel="noopener" to
rel="noopener noreferrer".

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Files touched

Diff

commit e041ec6c8a31356bef87d42978dc979621e02daa
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Mon May 25 20:54:51 2026 -0700

    add noreferrer to every target=_blank link
    
    Tabnabbing + referrer-leak hardening across both static HTML and JS-built
    product cards. 8 links upgraded from rel="noopener" to
    rel="noopener noreferrer".
    
    Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 public/index.html | 12 ++++++------
 public/js/site.js |  6 +++---
 2 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/public/index.html b/public/index.html
index 84d9ac6..a537157 100644
--- a/public/index.html
+++ b/public/index.html
@@ -153,7 +153,7 @@
 
     <nav class="header-nav">
       <a href="#collection">Collection</a>
-      <a href="https://designerwallcoverings.com/pages/trade" target="_blank" rel="noopener">Trade</a>
+      <a href="https://designerwallcoverings.com/pages/trade" target="_blank" rel="noopener noreferrer">Trade</a>
       <a href="mailto:info@chinoiseriewallpaper.com">Contact</a>
     </nav>
 
@@ -289,7 +289,7 @@
       <h3>Order Memo Samples — Free</h3>
       <p>Touch the pattern before you commit. Every chinoiserie wallcovering in our collection is available as a complimentary memo sample, shipped to your studio or jobsite.</p>
     </div>
-    <a href="https://designerwallcoverings.com/collections/wallcoverings" target="_blank" rel="noopener" class="btn-primary btn-gold">Request Samples</a>
+    <a href="https://designerwallcoverings.com/collections/wallcoverings" target="_blank" rel="noopener noreferrer" class="btn-primary btn-gold">Request Samples</a>
   </div>
 </section>
 
@@ -298,13 +298,13 @@
   <div class="footer-inner">
     <div class="footer-brand">
       <span class="brand-text-sm">Chinoiserie Wallpaper</span>
-      <p>A curated vertical of <a href="https://designerwallcoverings.com" target="_blank" rel="noopener">Designer Wallcoverings</a></p>
+      <p>A curated vertical of <a href="https://designerwallcoverings.com" target="_blank" rel="noopener noreferrer">Designer Wallcoverings</a></p>
       <p><a href="mailto:info@chinoiseriewallpaper.com">info@chinoiseriewallpaper.com</a></p>
     </div>
     <div class="footer-links">
-      <a href="https://designerwallcoverings.com/pages/trade" target="_blank" rel="noopener">Trade Accounts</a>
-      <a href="https://designerwallcoverings.com/pages/contact" target="_blank" rel="noopener">Contact DW</a>
-      <a href="https://designerwallcoverings.com/pages/privacy-policy" target="_blank" rel="noopener">Privacy</a>
+      <a href="https://designerwallcoverings.com/pages/trade" target="_blank" rel="noopener noreferrer">Trade Accounts</a>
+      <a href="https://designerwallcoverings.com/pages/contact" target="_blank" rel="noopener noreferrer">Contact DW</a>
+      <a href="https://designerwallcoverings.com/pages/privacy-policy" target="_blank" rel="noopener noreferrer">Privacy</a>
     </div>
     <div class="footer-mark">
       <p>&copy; 2026 Designer Wallcoverings. All rights reserved.</p>
diff --git a/public/js/site.js b/public/js/site.js
index 6eb9357..c34eb1d 100644
--- a/public/js/site.js
+++ b/public/js/site.js
@@ -125,10 +125,10 @@ function buildCard(p) {
       >
       <div class="card-overlay">
         <div class="card-overlay-actions">
-          <a href="${escHtml(sampleUrl)}" target="_blank" rel="noopener" class="btn-sample">
+          <a href="${escHtml(sampleUrl)}" target="_blank" rel="noopener noreferrer" class="btn-sample">
             Order Memo Sample (free)
           </a>
-          <a href="${escHtml(productUrl)}" target="_blank" rel="noopener" class="btn-view">
+          <a href="${escHtml(productUrl)}" target="_blank" rel="noopener noreferrer" class="btn-view">
             View Full Details
           </a>
         </div>
@@ -140,7 +140,7 @@ function buildCard(p) {
       ${dotsHtml}
       <div class="card-footer">
         ${priceDisplay}
-        <a href="${escHtml(sampleUrl)}" target="_blank" rel="noopener" class="card-sample-link">
+        <a href="${escHtml(sampleUrl)}" target="_blank" rel="noopener noreferrer" class="card-sample-link">
           Free Sample
         </a>
       </div>

← f031da9 remove DW vendor leaks from customer UI  ·  back to Chinoiseriewallpaper  ·  add 404-guard middleware b78efdd →