– rel="noopener noreferrer" prevents the new tab from gaining window.opener access, protecting against reverse‑tabnabbing.