From 8d8351f5a1f6bbd0f174f6dd07d4ec3576adb262 Mon Sep 17 00:00:00 2001
From: Mark Eaton <MarkEEaton@users.noreply.github.com>
Date: Sun, 14 Jun 2026 00:09:10 -0400
Subject: [PATCH] Add rel=noopener noreferrer to target=_blank links

---
 groups/home/bootstrap5/home1.html | 10 ++++++++++
 groups/home/bootstrap5/home1.js   |  1 +
 2 files changed, 11 insertions(+)

diff --git a/groups/home/bootstrap5/home1.html b/groups/home/bootstrap5/home1.html
index 3c4fe9e..bce9770 100644
--- a/groups/home/bootstrap5/home1.html
+++ b/groups/home/bootstrap5/home1.html
@@ -61,6 +61,7 @@
                     v-bind:aria-label="item.description + (item.target_blank ? ' (opens in new tab)' : '')"
                     v-bind:href="item.link"
                     v-bind:target="item.target_blank"
+                    v-bind:rel="item.target_blank ? 'noopener noreferrer' : null"
                   >
                     <hamburger-component v-bind:item="item"></hamburger-component>
                   </a>
@@ -209,6 +210,7 @@
                       <a
                         href="http://kbcc.ezproxy.cuny.edu/login?url=https://search.ebscohost.com/login.aspx?authtype=ip,uid&custid=s9000138&profile=ehost&defaultdb=a9h"
                         target="_blank"
+                        rel="noopener noreferrer"
                         class="ga-library-links"
                         aria-label="Academic Search Complete (opens in new tab)"
                       >
@@ -220,6 +222,7 @@
                       <a
                         href="http://kbcc.ezproxy.cuny.edu/login?url=https://search.proquest.com/usmajordailies/advanced/news/fromDatabasesLayer?accountid=38336"
                         target="_blank"
+                        rel="noopener noreferrer"
                         class="ga-library-links"
                         aria-label="US Newspapers (opens in new tab)"
                       >
@@ -231,6 +234,7 @@
                       <a
                         href="http://www.nytimes.com/passes"
                         target="_blank"
+                        rel="noopener noreferrer"
                         class="ga-library-links"
                         aria-label="NY Times Free Pass (opens in new tab)"
                       >
@@ -290,6 +294,7 @@
                 aria-label="Instagram (opens in new tab)"
                 href="https://www.instagram.com/kbcclibrary/"
                 target="_blank"
+                rel="noopener noreferrer"
               >
                 <i aria-hidden="true" class="fab fa-instagram"></i>
               </a>
@@ -297,6 +302,7 @@
                 aria-label="Goodreads (opens in new tab)"
                 href="https://www.goodreads.com/user/show/51717966-kingsborough-library"
                 target="_blank"
+                rel="noopener noreferrer"
               >
                 <i aria-hidden="true" class="fab fa-goodreads"></i>
               </a>
@@ -304,6 +310,7 @@
                 aria-label="TikTok (opens in new tab)"
                 href="https://www.tiktok.com/@kbcclibrary?lang=en"
                 target="_blank"
+                rel="noopener noreferrer"
               >
                 <i aria-hidden="true" class="fab fa-tiktok"></i>
               </a>
@@ -311,6 +318,7 @@
                 aria-label="YouTube (opens in new tab)"
                 href="https://www.youtube.com/channel/UCpeJWrnzLXEizw8cMvVp-_Q/videos"
                 target="_blank"
+                rel="noopener noreferrer"
               >
                 <i aria-hidden="true" class="fab fa-youtube"></i>
               </a>
@@ -318,6 +326,7 @@
                 aria-label="Spotify (opens in new tab)"
                 href="https://open.spotify.com/user/313lfmvr4ezmkb2mhodzd5ubzg4a"
                 target="_blank"
+                rel="noopener noreferrer"
               >
                 <i aria-hidden="true" class="fab fa-spotify"></i>
               </a>
@@ -327,6 +336,7 @@
             <a
               href="https://www.cuny.edu"
               target="_blank"
+              rel="noopener noreferrer"
               aria-label="CUNY (opens in new tab)"
             >
               <img
diff --git a/groups/home/bootstrap5/home1.js b/groups/home/bootstrap5/home1.js
index 4b1b62c..8012bb9 100644
--- a/groups/home/bootstrap5/home1.js
+++ b/groups/home/bootstrap5/home1.js
@@ -81,6 +81,7 @@ const navigComponent = {
                  v-bind:aria-label="item.description + (item.target_blank ? ' (opens in new tab)' : '')"
                  v-bind:href="item.link"
                  v-bind:target="item.target_blank"
+                 v-bind:rel="item.target_blank ? 'noopener noreferrer' : null"
               >
                 <div class="bigger-fancy-text">
                   <i v-bind:class="item.icon" aria-hidden="true"></i>