mirror of
https://github.com/chillpadclub/bedolaga-cabinet.git
synced 2026-07-30 02:23:47 +00:00
fix: remove noreferrer from payment links to preserve Referer header
WATA DDoS Guard blocks requests without Referer (403 error). Removed noreferrer from window.open and <a> tags on payment URLs. noopener alone is sufficient for security (prevents window.opener access).
This commit is contained in:
@@ -10,7 +10,7 @@ function safeOpenUrl(url: string | undefined | null): void {
|
||||
try {
|
||||
const parsed = new URL(url);
|
||||
if (parsed.protocol === 'https:' || parsed.protocol === 'http:') {
|
||||
window.open(url, '_blank', 'noopener,noreferrer');
|
||||
window.open(url, '_blank', 'noopener');
|
||||
}
|
||||
} catch {
|
||||
// invalid URL, do nothing
|
||||
|
||||
Reference in New Issue
Block a user