containers / containers/podman.io
fix(security): prevent reverse tabnabbing by adding rel="noopener noreferrer" to target="_blank" links
- Dominant language
- TypeScript
- Stars
- 108
- Forks
- 188
- Avg merge
- 9d 15h
- Merged PRs (30d)
- 11
Description
### Bug Description
Several UI components use `` without `rel="noopener noreferrer"`.
Opening external links with `target="_blank"` without `rel="noopener noreferrer"` exposes the website to reverse tabnabbing security vulnerabilities (where the newly opened target tab can manipulate `window.opener.location` to maliciously redirect the original podman.io tab to a phishing URL).
**Affected Files:**
- `src/components/ui/Testimonial/index.tsx`
- `src/components/ui/ArticleCard/index.tsx`
- `src/components/content/ThankYouSection/index.tsx`
- `src/components/content/BlogArticlesList/index.tsx`
### Proposed Solution
- Add `rel="noopener noreferrer"` to all external anchor tags using `target="_blank"`. I have prepared a PR for this!
Contributor guide
No contributing guide indexed for this repository
Research direction
Review the four named components: src/components/ui/Testimonial/index.tsx, src/components/ui/ArticleCard/index.tsx, src/components/content/ThankYouSection/index.tsx, and src/components/content/BlogArticlesList/index.tsx. Find external anchors using target="_blank" and ensure each has the requested rel attribute; done means all affected links are covered and the UI builds successfully.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- frontend, security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Quiet
- Clarity
- Clearly specified
- Newbie friendliness
- 82/100