Merge pull request #971 from LikiosSedo/fix/window-open-noopener

fix: add noopener to window.open call in AnnouncementToastProvider
This commit is contained in:
Rohan Verma 2026-03-25 12:38:49 -07:00 committed by GitHub
commit 76822889f1
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -34,7 +34,7 @@ function showAnnouncementToast(announcement: Announcement) {
label: announcement.link.label, label: announcement.link.label,
onClick: () => { onClick: () => {
if (announcement.link?.url.startsWith("http")) { if (announcement.link?.url.startsWith("http")) {
window.open(announcement.link.url, "_blank"); window.open(announcement.link.url, "_blank", "noopener,noreferrer");
} else if (announcement.link?.url) { } else if (announcement.link?.url) {
window.location.href = announcement.link.url; window.location.href = announcement.link.url;
} }