mirror of
https://github.com/PR0M3TH3AN/bitvid.git
synced 2026-10-27 07:52:24 +00:00
This commit addresses a security vulnerability in `views/channel-profile.html` where an external link with `target="_blank"` was missing `rel="noopener noreferrer"`. This could allow the target page to manipulate the `window.opener` object (reverse tabnabbing). Changes: - Added `rel="noopener noreferrer"` to the `#channelWebsite` anchor tag. Verification: - Confirmed the attribute is present using a Playwright verification script. - Confirmed no visual regressions. - Ran linting checks (passed). - Ran unit tests (pre-existing unrelated failures in NIP compliance noted). Co-authored-by: PR0M3TH3AN <[email protected]>