add noopener,noreferrer to sister-site window.open(_blank) (reverse-tabnabbing defense)

4f0a5b641221e9343aff707f015b9c021d15641e · 2026-06-01 07:28:28 -0700 · Steve Abrams

Files touched

M public/index.html

Diff

commit 4f0a5b641221e9343aff707f015b9c021d15641e
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Mon Jun 1 07:28:28 2026 -0700

    add noopener,noreferrer to sister-site window.open(_blank) (reverse-tabnabbing defense)
---
 public/index.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/public/index.html b/public/index.html
index a2bef45..ca91f0f 100644
--- a/public/index.html
+++ b/public/index.html
@@ -705,7 +705,7 @@ textarea:focus-visible,
       const isCurrent = n.dataset.slug === SLUG;
       n.querySelector('circle').setAttribute('fill-opacity', isCurrent ? '1' : '0.55');
     });
-    n.addEventListener('click', () => window.open('https://' + n.dataset.slug + '.com', '_blank'));
+    n.addEventListener('click', () => window.open('https://' + n.dataset.slug + '.com', '_blank', 'noopener,noreferrer'));
   });
 })();
 </script>

← 682b3fe feat(fleet): theme1/theme2 query-param-gated toggle on catal · back to Glitterwalls · Remove Big Red widget — never UX-worked, collided with Help 2ea2c76 →