security: add rel=noopener noreferrer to target=_blank links (yoloforever cycle 3)

c912ba0d7ff7908e1b12a186830e25298a0a5460 · 2026-09-15 18:50:46 -0700 · Steve Abrams

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UxvvaJ7p6VRZ4RzKDaBXqK

Files touched

M public/index.html

Diff

commit c912ba0d7ff7908e1b12a186830e25298a0a5460
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Tue Sep 15 18:50:46 2026 -0700

    security: add rel=noopener noreferrer to target=_blank links (yoloforever cycle 3)
    
    Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
    Claude-Session: https://claude.ai/code/session_01UxvvaJ7p6VRZ4RzKDaBXqK
---
 public/index.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/public/index.html b/public/index.html
index 3077e0a..2b377ea 100644
--- a/public/index.html
+++ b/public/index.html
@@ -145,7 +145,7 @@ function render(){
       <div class="when" data-f="vav-when" title="${x.updated_at||''}">🕓 updated ${fmtDate(x.updated_at)}</div>
       <div class="kv" data-f="vav-scraper"><span>Scraper <b style="color:${x.launchable?'var(--on)':'var(--off)'}">${x.scraper_id||(x.skip_catalog_scrape?(x.is_private_label?'n/a — private label':'n/a — no source'):'none built')}</b></span></div>
       <div class="btns" data-f="vav-btns">
-        ${x.url?`<a class="act go" href="${x.url}" target="_blank">Open</a>`:''}
+        ${x.url?`<a rel="noopener noreferrer" class="act go" href="${x.url}" target="_blank">Open</a>`:''}
         ${x.status==='online'
           ? `<button class="act" onclick='act("restart",{vendor_code:${JSON.stringify(x.vendor_code)}},"restart ${x.agent_name}")'>Restart</button>
              <button class="act go" onclick='act("scan",{vendor_code:${JSON.stringify(x.vendor_code)}},"scan ${x.agent_name}")'>Scan</button>`

← f19f192 TK-11438: migrate postgres pool to unix socket on darwin · back to Vendor Agents Viewer · (newest)