Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -298,3 +298,9 @@ $ npm run coverage
## License

rc-cascader is released under the MIT license.

## 🤝 Contributing

<a href="https://openomy.app/github/react-component/cascader" target="_blank" style="display: block; width: 100%;" align="center">
<img src="https://www.openomy.app/svg?repo=react-component/cascader&chart=bubble&latestMonth=24" target="_blank" alt="Contribution Leaderboard" style="display: block; width: 100%;" />
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🛠️ Refactor suggestion

移除 <img> 标签上的 target 属性
<img> 元素不支持 target 属性,该属性在此处无效,应删除以保持语义和规范正确。

-   <img src="https://www.openomy.app/svg?repo=react-component/cascader&chart=bubble&latestMonth=24" target="_blank" alt="Contribution Leaderboard" style="display: block; width: 100%;" />
+   <img src="https://www.openomy.app/svg?repo=react-component/cascader&chart=bubble&latestMonth=24" alt="Contribution Leaderboard" style="display: block; width: 100%;" />
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
<img src="https://www.openomy.app/svg?repo=react-component/cascader&chart=bubble&latestMonth=24" target="_blank" alt="Contribution Leaderboard" style="display: block; width: 100%;" />
<img src="https://www.openomy.app/svg?repo=react-component/cascader&chart=bubble&latestMonth=24" alt="Contribution Leaderboard" style="display: block; width: 100%;" />
🤖 Prompt for AI Agents
In README.md at line 305, remove the target="_blank" attribute from the <img>
tag because the img element does not support the target attribute. This will
correct the HTML semantics and ensure the markup is valid.

</a>
Comment on lines +304 to +306
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🛠️ Refactor suggestion

在新标签页打开外部链接时请添加 rel="noopener noreferrer"
使用 target="_blank" 时未添加 rel="noopener noreferrer" 会导致潜在的反向标签劫持(tabnabbing)安全风险。

- <a href="https://openomy.app/github/react-component/cascader" target="_blank" style="display: block; width: 100%;" align="center">
+ <a href="https://openomy.app/github/react-component/cascader" target="_blank" rel="noopener noreferrer" style="display: block; width: 100%;" align="center">
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
<a href="https://openomy.app/github/react-component/cascader" target="_blank" style="display: block; width: 100%;" align="center">
<img src="https://www.openomy.app/svg?repo=react-component/cascader&chart=bubble&latestMonth=24" target="_blank" alt="Contribution Leaderboard" style="display: block; width: 100%;" />
</a>
<a href="https://openomy.app/github/react-component/cascader" target="_blank" rel="noopener noreferrer" style="display: block; width: 100%;" align="center">
<img src="https://www.openomy.app/svg?repo=react-component/cascader&chart=bubble&latestMonth=24" target="_blank" alt="Contribution Leaderboard" style="display: block; width: 100%;" />
</a>
🤖 Prompt for AI Agents
In README.md around lines 304 to 306, the anchor tag uses target="_blank" to
open the link in a new tab but lacks the rel="noopener noreferrer" attribute,
which is necessary to prevent tabnabbing security risks. Add rel="noopener
noreferrer" to the anchor tag alongside target="_blank" to mitigate this
vulnerability.

Loading