From 227fb014d4695908768687e8cec573dea6b05c89 Mon Sep 17 00:00:00 2001
From: likiosliu <likiosliu@gmail.com>
Date: Wed, 25 Mar 2026 12:32:24 +0800
Subject: [PATCH] fix: add noopener to window.open call in
 AnnouncementToastProvider

Closes #939
---
 .../components/announcements/AnnouncementToastProvider.tsx      | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/surfsense_web/components/announcements/AnnouncementToastProvider.tsx b/surfsense_web/components/announcements/AnnouncementToastProvider.tsx
index 3ae6bf233..6cb1b17e5 100644
--- a/surfsense_web/components/announcements/AnnouncementToastProvider.tsx
+++ b/surfsense_web/components/announcements/AnnouncementToastProvider.tsx
@@ -34,7 +34,7 @@ function showAnnouncementToast(announcement: Announcement) {
 					label: announcement.link.label,
 					onClick: () => {
 						if (announcement.link?.url.startsWith("http")) {
-							window.open(announcement.link.url, "_blank");
+							window.open(announcement.link.url, "_blank", "noopener,noreferrer");
 						} else if (announcement.link?.url) {
 							window.location.href = announcement.link.url;
 						}