noopener,noreferrer on window.open() sister-site jump (prevents new tab from accessing window.opener + leaking Referer)

c56bed82c7d58b28ab1713ad4ed6ff6ae91508e7 · 2026-05-25 21:24:04 -0700 · Steve

Files touched

M public/index.html

Diff

commit c56bed82c7d58b28ab1713ad4ed6ff6ae91508e7
Author: Steve <steve@designerwallcoverings.com>
Date:   Mon May 25 21:24:04 2026 -0700

    noopener,noreferrer on window.open() sister-site jump (prevents new tab from accessing window.opener + leaking Referer)
---
 public/index.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/public/index.html b/public/index.html
index 02ab325..e39782d 100644
--- a/public/index.html
+++ b/public/index.html
@@ -487,7 +487,7 @@ textarea:focus-visible,
       const isCurrent = n.dataset.slug === SLUG;
       n.querySelector('circle').setAttribute('fill-opacity', isCurrent ? '1' : '0.55');
     });
-    n.addEventListener('click', () => window.open('https://' + n.dataset.slug + '.com', '_blank'));
+    n.addEventListener('click', () => window.open('https://' + n.dataset.slug + '.com', '_blank', 'noopener,noreferrer'));
   });
 })();
 </script>

← da46879 404-guard .bak/.pre-* paths (defense-in-depth above .gitigno · back to Naturalwallcoverings · rail-card meta: render Designer Wallcoverings instead of p.v 6367dcb →