fix: add rel=noopener noreferrer to all target=_blank links

eedf687b4320e0b5249188d8638ef62443b28f5f · 2026-05-19 08:12:33 -0700 · Steve

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Files touched

M views/contractor.ejs
M views/lead.ejs

Diff

commit eedf687b4320e0b5249188d8638ef62443b28f5f
Author: Steve <steve@designerwallcoverings.com>
Date:   Tue May 19 08:12:33 2026 -0700

    fix: add rel=noopener noreferrer to all target=_blank links
    
    Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 views/contractor.ejs | 2 +-
 views/lead.ejs       | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/views/contractor.ejs b/views/contractor.ejs
index 77eb8e1..bb47885 100644
--- a/views/contractor.ejs
+++ b/views/contractor.ejs
@@ -50,7 +50,7 @@
     </div>
 
     <div class="cta-row">
-      <a class="btn-primary" href="<%= contractor.contact_url %>" target="_blank" rel="noopener">Contact <%= contractor.company %> &rarr;</a>
+      <a class="btn-primary" href="<%= contractor.contact_url %>" target="_blank" rel="noopener noreferrer">Contact <%= contractor.company %> &rarr;</a>
       <a class="btn-ghost" href="mailto:<%= site.email %>?subject=Question%20about%20<%= encodeURIComponent(contractor.company) %>">Ask the directory</a>
     </div>
   </section>
diff --git a/views/lead.ejs b/views/lead.ejs
index 0bb1d69..e483f70 100644
--- a/views/lead.ejs
+++ b/views/lead.ejs
@@ -143,7 +143,7 @@
 
         <label class="consent">
           <input type="checkbox" name="consent" required>
-          <span>I agree to be contacted by matched installers about this project. <a href="/privacy" target="_blank">Privacy</a> · I can opt out anytime.</span>
+          <span>I agree to be contacted by matched installers about this project. <a href="/privacy" target="_blank" rel="noopener noreferrer">Privacy</a> · I can opt out anytime.</span>
         </label>
 
         <div class="step-actions">

← 98e6513 polish: distinct tagline + meta + Wc wordmark + procurement · back to Wallpapercontractor · harden: 404-guard snapshot artifacts from static root + igno 31e873e →