Aias00 opened a new issue, #829: URL: https://github.com/apache/rocketmq-dashboard/issues/829
## Problem The Settings About tab opens external links with `target="_blank"` but does not set `rel="noopener noreferrer"`. This allows the opened page to retain `window.opener` access in browsers that do not apply implicit protection, which is an avoidable tabnabbing risk. ## Evidence `web/src/pages/settings/index.tsx` renders external links for GitHub, docs, and the RocketMQ community site with `target="_blank"` only. ## Expected behavior External links that open in a new tab should include `rel="noopener noreferrer"`. ## Scope Small frontend hardening fix for the Studio Settings About tab. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
