security: add rel=noopener noreferrer to target=_blank links (yoloforever cycle 3)

4538c85550ab6626fd8d4cc058eca5f304cac1b9 · 2026-09-15 18:50:46 -0700 · Steve Abrams

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UxvvaJ7p6VRZ4RzKDaBXqK

Files touched

M public/index.html

Diff

commit 4538c85550ab6626fd8d4cc058eca5f304cac1b9
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Tue Sep 15 18:50:46 2026 -0700

    security: add rel=noopener noreferrer to target=_blank links (yoloforever cycle 3)
    
    Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
    Claude-Session: https://claude.ai/code/session_01UxvvaJ7p6VRZ4RzKDaBXqK
---
 public/index.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/public/index.html b/public/index.html
index e06deff..374a436 100644
--- a/public/index.html
+++ b/public/index.html
@@ -177,7 +177,7 @@ function render(d){
       <td class="mono">…${x.last4}</td>
       <td class="mono mut">${x.rotated}</td>
       <td>${x.stale?pill('bad','rotate'):pill('ok','fresh')}</td>
-      <td><a href="${x.url}" target="_blank">regen ↗</a></td></tr>`).join('')}
+      <td><a rel="noopener noreferrer" href="${x.url}" target="_blank">regen ↗</a></td></tr>`).join('')}
     </table>`;
 
   // hardcoded credential leaks (fleet sweep)

← 3807fb1 chore: macstudio3 migration — reconcile from mac2 + repoint · back to Security Dashboard · (newest)