From 5ab34a2f50d1c34e3abf6635247fa81775cc83b1 Mon Sep 17 00:00:00 2001
From: akinshaywai <akinshaywai@users.noreply.github.com>
Date: Fri, 24 Apr 2026 01:48:37 +0100
Subject: [PATCH] fix: add rel="noopener noreferrer" to hub link in ConfigPanel

The 'Manage Page Agent Hub' link uses target="_blank" without
rel="noopener noreferrer". This exposes the opener browsing context
to the target page via window.opener. All other external links in
ConfigPanel already include this attribute.
---
 packages/extension/src/components/ConfigPanel.tsx | 1 +
 1 file changed, 1 insertion(+)

diff --git a/packages/extension/src/components/ConfigPanel.tsx b/packages/extension/src/components/ConfigPanel.tsx
index bdbc9f0..c278524 100644
--- a/packages/extension/src/components/ConfigPanel.tsx
+++ b/packages/extension/src/components/ConfigPanel.tsx
@@ -181,6 +181,7 @@ export function ConfigPanel({ config, onSave, onClose }: ConfigPanelProps) {
 			<a
 				href="/hub.html"
 				target="_blank"
+				rel="noopener noreferrer"
 				className="flex items-center justify-between p-3 rounded-md border bg-muted/50 text-xs font-medium text-muted-foreground hover:text-foreground hover:border-foreground/20 transition-colors"
 			>
 				Manage Page Agent Hub