fix(security): add noopener,noreferrer to all window.open calls

Prevent reverse tabnapping by adding security attributes to all
window.open calls that open links in new tabs.
This commit is contained in:
yukaidi
2026-05-29 03:24:53 +08:00
parent 07a330cfd4
commit 29d8bf3ea4
3 changed files with 5 additions and 5 deletions

View File

@@ -1178,7 +1178,7 @@ function parseById(shareLinkInfo, http, logger) {
// 新窗口打开首页
const goHomeInNewWindow = () => {
window.open('/', '_blank');
window.open('/', '_blank', 'noopener,noreferrer');
};
// 检查是否有未保存的文件