add noopener,noreferrer to window.open(_blank) sister-site links to prevent opener tampering

a5f0ebe1269830985a64aaac190224a43877db2c · 2026-05-25 21:34:29 -0700 · Steve Abrams

Files touched

M public/index.html

Diff

commit a5f0ebe1269830985a64aaac190224a43877db2c
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Mon May 25 21:34:29 2026 -0700

    add noopener,noreferrer to window.open(_blank) sister-site links to prevent opener tampering
---
 public/index.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/public/index.html b/public/index.html
index 69329b8..c074209 100644
--- a/public/index.html
+++ b/public/index.html
@@ -452,7 +452,7 @@ textarea:focus-visible,
       const isCurrent = n.dataset.slug === SLUG;
       n.querySelector('circle').setAttribute('fill-opacity', isCurrent ? '1' : '0.55');
     });
-    n.addEventListener('click', () => window.open('https://' + n.dataset.slug + '.com', '_blank'));
+    n.addEventListener('click', () => window.open('https://' + n.dataset.slug + '.com', '_blank', 'noopener,noreferrer'));
   });
 })();
 </script>

← dd4f28a add clean-URL routes for /care /history /sourcing /trade /vo · back to Silkwallcoverings · wire api-vendor-redact middleware as first app.use so /api/* ae0ab5a →