security: add rel="noopener noreferrer" to external links

Prevents reverse tabnabbing attacks on target="_blank" links.
2026-01-14 19:36:15 +00:00
parent e902a9c27a
commit d9be0207bb
3 changed files with 8 additions and 2 deletions
@@ -572,7 +572,8 @@ function renderSidebar(elRoot: HTMLElement): void {
    const footer = el('div', { className: 'christmas-footer' }, [
        el('a', {
            href: "https://github.com/AEmotionStudio/ComfyUI-ChristmasTheme",
-            target: "_blank"
+            target: "_blank",
+            rel: "noopener noreferrer"
        }, ["🎁 GitHub"])
    ]);