From 1aed9408a4a3c8f2a4c06e8fa0e08f19323ebb3f Mon Sep 17 00:00:00 2001
From: Alessio Pelliccione <alessiopelliccione02@gmail.com>
Date: Sun, 16 Nov 2025 17:33:01 +0100
Subject: [PATCH] fix(devtools): ensure external docs link opens correctly from
 extension popup

Adds target="_blank" and rel="noopener noreferrer" to prevent tab-nabbing and follow modern security best practices.
---
 devtools/projects/shell-browser/src/popups/production.html | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/devtools/projects/shell-browser/src/popups/production.html b/devtools/projects/shell-browser/src/popups/production.html
index fd2650124dd..ec7cc759d3f 100644
--- a/devtools/projects/shell-browser/src/popups/production.html
+++ b/devtools/projects/shell-browser/src/popups/production.html
@@ -56,7 +56,12 @@
         <section>
           <p>
             Angular application running in
-            <a href="https://angular.dev/api/core/enableProdMode">production mode</a>.
+            <a
+              href="https://angular.dev/api/core/enableProdMode"
+              target="_blank"
+              rel="noopener noreferrer"
+              >production mode</a
+            >.
           </p>
           <p>We recommend using DevTools with apps in dev mode, running <code>ng serve</code>.</p>
         </section>