fix: remove noreferrer from payment links to preserve Referer header

WATA DDoS Guard blocks requests without Referer (403 error).
Removed noreferrer from window.open and <a> tags on payment URLs.
noopener alone is sufficient for security (prevents window.opener access).
This commit is contained in:
Fringg
2026-03-09 21:53:55 +03:00
parent 4322d58ff8
commit 45203dac59
3 changed files with 4 additions and 4 deletions

View File

@@ -10,7 +10,7 @@ function safeOpenUrl(url: string | undefined | null): void {
try {
const parsed = new URL(url);
if (parsed.protocol === 'https:' || parsed.protocol === 'http:') {
window.open(url, '_blank', 'noopener,noreferrer');
window.open(url, '_blank', 'noopener');
}
} catch {
// invalid URL, do nothing