harden: noopener noreferrer on target=_blank (Facebook link + sister-site window.open)

eb100071b91962c503755fc11c81f2fcf9d34108 · 2026-05-25 21:07:50 -0700 · Steve

Files touched

M public/index.html

Diff

commit eb100071b91962c503755fc11c81f2fcf9d34108
Author: Steve <steve@designerwallcoverings.com>
Date:   Mon May 25 21:07:50 2026 -0700

    harden: noopener noreferrer on target=_blank (Facebook link + sister-site window.open)
---
 public/index.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/public/index.html b/public/index.html
index 75be8df..d50dde2 100644
--- a/public/index.html
+++ b/public/index.html
@@ -418,7 +418,7 @@ textarea:focus-visible,
   
     <div class="footer-col">
       <h4>Social</h4>
-      <a class="fb-link" href="https://www.facebook.com/SteveAbramsDesigns.DesignerWallcoverings" target="_blank" rel="noopener">Facebook</a>
+      <a class="fb-link" href="https://www.facebook.com/SteveAbramsDesigns.DesignerWallcoverings" target="_blank" rel="noopener noreferrer">Facebook</a>
     </div>
   </div>
   <div class="footer-bottom">
@@ -486,7 +486,7 @@ textarea:focus-visible,
       const isCurrent = n.dataset.slug === SLUG;
       n.querySelector('circle').setAttribute('fill-opacity', isCurrent ? '1' : '0.55');
     });
-    n.addEventListener('click', () => window.open('https://' + n.dataset.slug + '.com', '_blank'));
+    n.addEventListener('click', () => window.open('https://' + n.dataset.slug + '.com', '_blank', 'noopener,noreferrer'));
   });
 })();
 </script>

← 7b8c1f0 add: 404-guard middleware blocks .bak/.pre-* requests (defen · back to Greenwallcoverings · rails: repoint at real aesthetic buckets so rails fire + edi 74d1f10 →