Add noreferrer to all target=_blank external links

26ab45f0a740e8790a8e95157a34d54b93960f57 · 2026-05-19 08:01:09 -0700 · Steve Abrams

Four blank-target links (DW catalog, Free Sample, Order Free Memo, Shop
on DW) had rel="noopener" but not noreferrer. Now rel="noopener
noreferrer" on all.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Files touched

M server.js

Diff

commit 26ab45f0a740e8790a8e95157a34d54b93960f57
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Tue May 19 08:01:09 2026 -0700

    Add noreferrer to all target=_blank external links
    
    Four blank-target links (DW catalog, Free Sample, Order Free Memo, Shop
    on DW) had rel="noopener" but not noreferrer. Now rel="noopener
    noreferrer" on all.
    
    Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 server.js | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/server.js b/server.js
index c126fb1..0c54328 100644
--- a/server.js
+++ b/server.js
@@ -490,7 +490,7 @@ const layout = (title, body, { q='', type='' } = {}) => `<!doctype html>
     <li><a href="/samples">How Memo Samples Work</a></li>
     <li><a href="/trade">Trade Pricing</a></li>
     <li><a href="/contact">Contact Us</a></li>
-    <li><a href="${DW_SHOPIFY}" target="_blank" rel="noopener">Shop the Full DW Catalog ↗</a></li>
+    <li><a href="${DW_SHOPIFY}" target="_blank" rel="noopener noreferrer">Shop the Full DW Catalog ↗</a></li>
   </ul>
   <div class="menu-foot">
     A private collection by<br>
@@ -544,7 +544,7 @@ function cardHtml(p) {
     </div>
     <div class="actions">
       <a href="/p/${esc(p.handle||'')}">View</a>
-      <a class="cta" href="${esc(memoSampleUrl(p.handle))}" target="_blank" rel="noopener">Free Sample</a>
+      <a class="cta" href="${esc(memoSampleUrl(p.handle))}" target="_blank" rel="noopener noreferrer">Free Sample</a>
     </div>
   </article>`;
 }
@@ -669,8 +669,8 @@ app.get('/p/:handle', (req, res) => {
         <div class="row"><div class="k">SKU</div><div>${esc(p.dw_sku || '—')}</div></div>
         <div class="row"><div class="k">Type</div><div>${esc(p.product_type)}</div></div>
         <div class="actions">
-          <a class="btn-primary" href="${esc(memoSampleUrl(p.handle))}" target="_blank" rel="noopener">Order Free Memo</a>
-          <a class="btn-secondary" href="${esc(shopifyUrl(p.handle))}" target="_blank" rel="noopener">Shop on DW</a>
+          <a class="btn-primary" href="${esc(memoSampleUrl(p.handle))}" target="_blank" rel="noopener noreferrer">Order Free Memo</a>
+          <a class="btn-secondary" href="${esc(shopifyUrl(p.handle))}" target="_blank" rel="noopener noreferrer">Shop on DW</a>
         </div>
       </div>
     </div>

← 2befa8b Untrack backup snapshot, broaden .gitignore, add .bak/.pre- · back to Hollywood Wallcoverings · stage2: wire hollywood-wallcoverings onto shared catalog (ha 11b30f7 →