fix: missing noopener for external links https://github.com/rejetto/hfs/security/advisories/GHSA-xcxh-6cv4-q8p8
Byte committed
Jul 26, 2025 at 13:38 UTC
6531bcd2ab285af88f91831e30d8a03f5b9fe20d
1 file changed
+1
frontend/src/fileMenu.ts
+1
@@ -47,6 +47,7 @@ export async function openFileMenu(entry: DirEntry, ev: MouseEvent, addToMenu: (
47
label: t('file_open', "Open"),
48
href: uri,
49
target: isFolder || entry.web ? undefined : '_blank',
50
+ rel: isFolder || entry.web ? undefined : 'noopener noreferrer',
51
onClick: makeOnClickOpen(entry)
52
}
53
return !isFolder || open.onClick ? open : h(LinkClosingDialog, { to: uri, reloadDocument: entry.web }, hIcon(open.icon), open.label)