fix: missing noopener for external links GHSA-xcxh-6cv4-q8p8

ByteAfterlife · rejetto · commit 6531bcd2ab28 · 2025-08-09T00:00:31.000+02:00
diff --git a/frontend/src/fileMenu.ts b/frontend/src/fileMenu.ts
@@ -47,6 +47,7 @@ export async function openFileMenu(entry: DirEntry, ev: MouseEvent, addToMenu: (
                     label: t('file_open', "Open"),
                     href: uri,
                     target: isFolder || entry.web ? undefined : '_blank',
+                    rel: isFolder || entry.web ? undefined : 'noopener noreferrer',
                     onClick: makeOnClickOpen(entry)
                 }
                 return !isFolder || open.onClick ? open : h(LinkClosingDialog, { to: uri, reloadDocument: entry.web }, hIcon(open.icon), open.label)

Original file line number	Diff line number	Diff line change
`@@ -47,6 +47,7 @@ export async function openFileMenu(entry: DirEntry, ev: MouseEvent, addToMenu: (`
`47`	`47`	`label: t('file_open', "Open"),`
`48`	`48`	`href: uri,`
`49`	`49`	`target: isFolder \|\| entry.web ? undefined : '_blank',`
	`50`	`+ rel: isFolder \|\| entry.web ? undefined : 'noopener noreferrer',`
`50`	`51`	`onClick: makeOnClickOpen(entry)`
`51`	`52`	`}`
`52`	`53`	`return !isFolder \|\| open.onClick ? open : h(LinkClosingDialog, { to: uri, reloadDocument: entry.web }, hIcon(open.icon), open.label)`