← back to Sample Box
security: add rel=noopener noreferrer to target=_blank links (yoloforever cycle 3)
5a396c6726811dfa925a0b10c2710b98118b6b33 · 2026-09-15 18:50:45 -0700 · Steve Abrams
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UxvvaJ7p6VRZ4RzKDaBXqK
Files touched
Diff
commit 5a396c6726811dfa925a0b10c2710b98118b6b33
Author: Steve Abrams <steve@designerwallcoverings.com>
Date: Tue Sep 15 18:50:45 2026 -0700
security: add rel=noopener noreferrer to target=_blank links (yoloforever cycle 3)
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UxvvaJ7p6VRZ4RzKDaBXqK
---
public/index.html | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/public/index.html b/public/index.html
index 2399ae4..5f95968 100644
--- a/public/index.html
+++ b/public/index.html
@@ -324,7 +324,7 @@ body.sbhf-sku [data-f="sku"] {display:none}
<div class="shopify-redirect-notice" id="shopify-redirect-notice" style="display:none">
🔗 <strong>Redirecting to Shopify checkout…</strong><br>
If the page doesn't redirect automatically,
- <a id="shopify-fallback-link" href="#" target="_blank" style="color:#27ae60;font-weight:600">click here to complete checkout</a>.
+ <a rel="noopener noreferrer" id="shopify-fallback-link" href="#" target="_blank" style="color:#27ae60;font-weight:600">click here to complete checkout</a>.
</div>
<div class="confirm-detail" id="confirm-detail"></div>
<div class="btns" style="justify-content:center;margin-top:24px">
@@ -593,7 +593,7 @@ function showConfirmation(order){
<p>${esc(addr.address1)}${addr.address2?' '+esc(addr.address2):''}</p>
<p>${esc(addr.city)}, ${esc(addr.state)} ${esc(addr.zip)} ${esc(addr.country)}</p>
<p><strong>Email:</strong> ${esc(order.email)}</p>
- <p><strong>Payment:</strong> Shopify-hosted checkout${permalink?` — <a href="${esc(permalink)}" target="_blank" style="color:#27ae60">proceed to checkout</a>`:''}</p>
+ <p><strong>Payment:</strong> Shopify-hosted checkout${permalink?` — <a rel="noopener noreferrer" href="${esc(permalink)}" target="_blank" style="color:#27ae60">proceed to checkout</a>`:''}</p>
<p><strong>Local capture:</strong> ${esc(order.id)} saved ✓</p>`;
}
← 855017b add creds-in-URL fetch guard to gated pages (TK-10984)
·
back to Sample Box
·
(newest)