Security: Add rel="noopener noreferrer" to external links using target="_blank"

[SujalMahapatra]

Description

Several external links open in a new tab using target="_blank".

Some links already include rel="noopener noreferrer", while others appear to be missing it. This inconsistency may expose the application to reverse tabnabbing attacks.

Potential Locations

• apps/web/src/pages/LandingPage.tsx
• apps/web/src/pages/LeaderboardPage.tsx
• apps/web/src/pages/ProfilePage.tsx

Proposed Changes

• Audit all external links using target="_blank".
• Add rel="noopener noreferrer" where missing.
• Keep behavior unchanged.

Benefits

• Improves security.
• Aligns with web security best practices.
• Ensures consistency across the codebase.

Acceptance Criteria

• All external links opened with target="_blank" include appropriate rel attributes.
• No navigation regressions.
• Existing checks continue to pass.

[github-actions]

👋 Thanks for opening your first issue, @SujalMahapatra!

We appreciate your contribution and are excited to have you here. Please make sure to follow the contribution guidelines and provide as much detail as possible.

To stay updated, ask questions, and connect with maintainers and contributors, please join our Discord community:
https://discord.gg/QueQN83wn

Looking forward to collaborating with you!

[github-actions]

Hi @SujalMahapatra,

Thanks for opening this issue.

Please reply with one of the following areas so the issue can be routed to the appropriate team member:

- /backend
- /web
- /mobile
- /devops

Once an area is selected, the corresponding label will be added automatically.

[SujalMahapatra]

/web

[github-actions]

The issue has been classified as web.

@ShantKhatri, please review and triage this issue when available.

The web label has been applied and the issue has been routed accordingly.

[SujalMahapatra]

Hi @ShantKhatri , I'd like to work on this issue.

I reviewed the affected web pages and identified external links using target="_blank" that may be missing rel="noopener noreferrer".

I can:

• Audit all affected web pages
• Add missing security attributes where necessary
• Verify existing behavior remains unchanged
• Ensure all checks pass before submitting a PR

Please assign this issue to me. Thanks!