← back to Pitch Guard
Add rel=noreferrer to target=_blank link (mechanical safety pass)
b193fc50bc07a1bd4e56cbbcba8747673e14a8cf · 2026-05-19 17:33:29 -0700 · SteveStudio2
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Files touched
Diff
commit b193fc50bc07a1bd4e56cbbcba8747673e14a8cf
Author: SteveStudio2 <steve@designerwallcoverings.com>
Date: Tue May 19 17:33:29 2026 -0700
Add rel=noreferrer to target=_blank link (mechanical safety pass)
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
public/index.html | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/public/index.html b/public/index.html
index 93069bc..f70bfba 100644
--- a/public/index.html
+++ b/public/index.html
@@ -681,7 +681,7 @@ async function loadPitch(d){
'<label style="margin:0;flex:1">Pitch / followup body — edit before sending</label>'+
'<button type="button" id="btEdit" class="bodytab active">✎ Edit</button>'+
'<button type="button" id="btPrev" class="bodytab">👁 Preview</button>'+
- '<a href="/api/draft/'+d.id+'/html" target="_blank" rel="noopener" class="bodytab" title="Open the rendered email as a page">↗ Page</a>'+
+ '<a href="/api/draft/'+d.id+'/html" target="_blank" rel="noopener noreferrer" class="bodytab" title="Open the rendered email as a page">↗ Page</a>'+
'</div>'+
'<textarea id="pBody">'+esc(body)+'</textarea>'+
'<div id="pPreview" class="body-preview" style="display:none"></div>'+
← 30852ed Move George URL + auth to gitignored .env (was hardcoded in
·
back to Pitch Guard
·
Add 404-guard middleware so .bak/.pre- snapshot files never 88b1ce4 →