Skip to content

[Bug]: Missing rel="noopener noreferrer" on external link in ShowcaseCard #1984

Description

@OmanshiRaj

Is there an existing issue for this?

  • I have searched the existing issues

Describe the bug

In src/pages/showcase/_components/ShowcaseCard/index.tsx (line 68–74), the project website uses target="_blank" without rel="noopener noreferrer". This is a known security gap (reverse tabnabbing) — the newly opened page gets a handle on window.opener and can redirect the original showcase tab to a malicious page.

Expected behavior

The should include rel="noopener noreferrer" alongside target="_blank" so the opened tab has no access back to the original window.

Add ScreenShots

Not applicable — this is a code-level attribute issue, visible in DevTools Elements tab on any showcase card's external link.

What browsers are you seeing the problem on?

No response

Record

  • I have read the Contributing Guidelines
  • I want to work on this issue
  • I am a part of gssoc26

Metadata

Metadata

Assignees

Labels

Type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions