From 9d27fac63028b753ba617e020786d6ae16ec399a Mon Sep 17 00:00:00 2001
From: posimai <posimai.project@gmail.com>
Date: Fri, 20 Mar 2026 14:09:24 +0900
Subject: [PATCH] fix: add noopener,noreferrer to Brain window.open calls
 (Tabnabbing prevention)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 index.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/index.html b/index.html
index 5a481c0..f713046 100644
--- a/index.html
+++ b/index.html
@@ -1207,7 +1207,7 @@
             if (!ev) return;
             savedIds.add(id);
             localStorage.setItem('events-saved', JSON.stringify([...savedIds]));
-            window.open(`https://posimai-brain.vercel.app/?url=${encodeURIComponent(ev.url)}&title=${encodeURIComponent(ev.title)}`, '_blank');
+            window.open(`https://posimai-brain.vercel.app/?url=${encodeURIComponent(ev.url)}&title=${encodeURIComponent(ev.title)}`, '_blank', 'noopener,noreferrer');
             showToast('Brainに保存しました');
             renderTimeline();
         }
@@ -1251,7 +1251,7 @@
             brainBtn.onclick = () => {
                 savedIds.add(id);
                 localStorage.setItem('events-saved', JSON.stringify([...savedIds]));
-                window.open(`https://posimai-brain.vercel.app/?url=${encodeURIComponent(ev.url)}&title=${encodeURIComponent(ev.title)}`, '_blank');
+                window.open(`https://posimai-brain.vercel.app/?url=${encodeURIComponent(ev.url)}&title=${encodeURIComponent(ev.title)}`, '_blank', 'noopener,noreferrer');
                 showToast('Brainに保存しました');
                 brainBtn.innerHTML = '<i data-lucide="bookmark-check"></i> 保存済み';
                 brainBtn.style.color = 'var(--accent)';