From dceb3ebee732a36e131c1d8b536cb40f0db2001e Mon Sep 17 00:00:00 2001
From: hirrrooo <99264185+hirrrooo@users.noreply.github.com>
Date: Mon, 29 Jun 2026 07:22:17 +0000
Subject: [PATCH] fix(boards): prevent opener access for opened apps

---
 .../src/app/[locale]/boards/(content)/_header-actions.tsx      | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/apps/nextjs/src/app/[locale]/boards/(content)/_header-actions.tsx b/apps/nextjs/src/app/[locale]/boards/(content)/_header-actions.tsx
index f06065abf..7c12db865 100644
--- a/apps/nextjs/src/app/[locale]/boards/(content)/_header-actions.tsx
+++ b/apps/nextjs/src/app/[locale]/boards/(content)/_header-actions.tsx
@@ -71,8 +71,9 @@ export const BoardContentHeaderActions = () => {
     const appsWithUrls = apps.filter((app) => app.href && app.href.length > 0);
 
     for (const app of appsWithUrls) {
-      const openedWindow = window.open(app.href ?? undefined);
+      const openedWindow = window.open(app.href ?? undefined, "_blank", "noopener,noreferrer");
       if (openedWindow) {
+        openedWindow.opener = null;
         continue;
       }