From 9cbd7717c1dd191a37d58fc1cd3070b51d32d9b0 Mon Sep 17 00:00:00 2001
From: sarthakkaushik927 <sarthakkaushik927@gmail.com>
Date: Wed, 12 Aug 2026 17:12:14 +0530
Subject: [PATCH] fix(security): prevent tabnabbing by adding rel noopener
 noreferrer to target blank links

Signed-off-by: sarthakkaushik927 <sarthakkaushik927@gmail.com>
---
 src/components/content/ThankYouSection/index.tsx | 7 +++++++
 src/components/ui/ArticleCard/index.tsx          | 2 ++
 src/components/ui/Testimonial/index.tsx          | 2 +-
 3 files changed, 10 insertions(+), 1 deletion(-)

diff --git a/src/components/content/ThankYouSection/index.tsx b/src/components/content/ThankYouSection/index.tsx
index 5df5dba6c1..75ca2343ab 100644
--- a/src/components/content/ThankYouSection/index.tsx
+++ b/src/components/content/ThankYouSection/index.tsx
@@ -33,42 +33,49 @@ function ThankYouSection(): JSX.Element {
           <a
             href={redHat.href}
             target="_blank"
+            rel="noopener noreferrer"
             className="mx-4 mb-4 inline-block rounded-md p-4  dark:bg-gray-100 lg:row-span-2 lg:row-start-1 lg:mb-0">
             <img {...redHat} className="mx-auto p-4" />
           </a>
           <a
             href={amadeus.href}
             target="_blank"
+            rel="noopener noreferrer"
             className="mx-4 mb-4 inline-block rounded-md p-4 dark:bg-gray-100 lg:mb-0 lg:flex lg:h-28 lg:w-80 lg:items-center">
             <img {...amadeus} className="object-fit mx-auto max-w-sm p-4 " />
           </a>
           <a
             href={suse.href}
             target="_blank"
+            rel="noopener noreferrer"
             className="mx-4 mb-4 inline-block rounded-md p-4 dark:bg-gray-100 lg:mb-0 lg:flex lg:h-28 lg:w-80 lg:items-center">
             <img {...suse} className="object-fit mx-auto max-w-sm p-4 " />
           </a>
           <a
             href={motorola.href}
             target="_blank"
+            rel="noopener noreferrer"
             className="mx-4 mb-4 inline-block rounded-md p-4 dark:bg-gray-100 lg:row-span-2 lg:row-start-1 lg:mb-0">
             <img {...motorola} className="mx-auto p-4" />
           </a>
           <a
             href={ntt.href}
             target="_blank"
+            rel="noopener noreferrer"
             className="mx-4 mb-4 inline-block rounded-md p-4 dark:bg-gray-100 lg:mb-0 lg:flex lg:h-28 lg:w-80 lg:items-center">
             <img {...ntt} className="object-fit mx-auto max-w-sm p-4 " />
           </a>
           <a
             href={ibm.href}
             target="_blank"
+            rel="noopener noreferrer"
             className="col-span-3 mx-4 mb-4 inline-block rounded-md p-4 dark:bg-gray-100 lg:mb-0 lg:flex lg:h-28 lg:w-80 lg:items-center">
             <img {...ibm} className="object-fit mx-auto max-w-sm p-4 " />
           </a>
           <a
             href={debian.href}
             target="_blank"
+            rel="noopener noreferrer"
             className="mx-4 mb-4 inline-block rounded-md p-4 dark:bg-gray-100 lg:row-span-2 lg:row-start-1 lg:mb-0">
             <img {...debian} className="mx-auto p-4" />
           </a>
diff --git a/src/components/ui/ArticleCard/index.tsx b/src/components/ui/ArticleCard/index.tsx
index d1ff58c057..0f13b388a6 100644
--- a/src/components/ui/ArticleCard/index.tsx
+++ b/src/components/ui/ArticleCard/index.tsx
@@ -53,6 +53,7 @@ function ArticleCard(props: ArticleCardProps) {
                 <a
                   href={props.path}
                   target="_blank"
+                  rel="noopener noreferrer"
                   className="text-white no-underline hover:text-blue-100 hover:no-underline dark:text-white dark:hover:text-blue-50">
                   {sanitizeHtml(props.title)}
                 </a>
@@ -83,6 +84,7 @@ function ArticleCard(props: ArticleCardProps) {
             <a
               href={props.path}
               target="_blank"
+                  rel="noopener noreferrer"
               className="text-white no-underline hover:text-blue-100 hover:no-underline dark:text-white dark:hover:text-blue-50">
               {sanitizeHtml(props.title)}
             </a>
diff --git a/src/components/ui/Testimonial/index.tsx b/src/components/ui/Testimonial/index.tsx
index c85ba2bb8a..e6f6434bcc 100644
--- a/src/components/ui/Testimonial/index.tsx
+++ b/src/components/ui/Testimonial/index.tsx
@@ -31,7 +31,7 @@ function Testimonial(props: TestimonialProps) {
       </div>
       <div className="mt-2 mb-4 truncate">
         <p className="whitespace-normal text-gray-900 dark:text-gray-300 leading-snug mb-2">{props.description}</p>
-        {props.featuredlink && <a target="_blank" href={props.featuredlink}>{props.featuredlink}</a>}
+        {props.featuredlink && <a target="_blank" rel="noopener noreferrer" href={props.featuredlink}>{props.featuredlink}</a>}
       </div>
       <div className="mt-auto self-start text-gray-300 dark:text-gray-700 italic">
         <a href={props.path} className="text-gray-300 dark:text-gray-700 dark:hover:text-gray-700 no-underline hover:no-underline hover:bg-purple-300">