Fix: Add rel="noopener noreferrer" to embed watch button

This commit mitigates a reverse tabnabbing vulnerability by ensuring
that the external link in the embed player opens with proper
security attributes.

Co-authored-by: PR0M3TH3AN <[email protected]>
This commit is contained in:
google-labs-jules[bot]andPR0M3TH3AN committed 2026-02-26 17:33:00 +00:00
1 parent 9913e484ab
commit d5296f82d7
1 file changed
+1
+1
View File
@@ -96,6 +96,7 @@
id="embedWatchButton"
href="#"
target="_blank"
rel="noopener noreferrer"
class="flex items-center gap-2 rounded-full border border-white/20 bg-white/10 px-3 py-1.5 text-xs font-medium text-white transition-colors hover:bg-white/20 backdrop-blur-md"
>
<span>Watch on</span>