src/components/InlineLink.tsx (1)

38-46: Consider extracting safeRel normalization into a shared helper.

This logic now exists in both InlineLink and DropdownMenuItem; centralizing it would reduce drift and keep future security updates consistent.

🤖 Prompt for AI Agents

Verify each finding against the current code and only fix it if needed.

In `@src/components/InlineLink.tsx` around lines 38 - 46, Extract the
rel-normalization logic into a shared helper (e.g., getSafeRel or normalizeRel)
that accepts (rel?: string, target?: string) and returns the normalized rel
string; implement it to split tokens, filter empties, add "noopener" and
"noreferrer" when target === "_blank", de-duplicate and join tokens, then
replace the inline memo in the InlineLink component (safeRel) and the similar
logic in DropdownMenuItem to call this new helper; export the helper from a
common utilities module so both components import and use it, and keep the
memoization in InlineLink (React.useMemo) but use the helper inside it to avoid
behavior changes.

src/components/DropdownMenu.tsx (1)

114-122: Consider centralizing safeRel generation to avoid security-policy drift.

This logic is now duplicated with src/components/InlineLink.tsx:37-56. Extracting a small shared helper (e.g., buildSafeRel(target, rel)) would keep _blank hardening consistent across components.

♻️ Proposed refactor (shared helper + local usage)

+// e.g. src/utils/linkSecurity.ts
+export function buildSafeRel(target?: string, rel?: string) {
+  if (target !== "_blank") return rel;
+
+  const tokens = new Set((rel ?? "").split(/\s+/).filter(Boolean));
+  tokens.add("noopener");
+  tokens.add("noreferrer");
+
+  return Array.from(tokens).join(" ");
+}

-    const safeRel = React.useMemo(() => {
-      if (target !== "_blank") return rel;
-
-      const tokens = new Set((rel ?? "").split(/\s+/).filter(Boolean));
-      tokens.add("noopener");
-      tokens.add("noreferrer");
-
-      return Array.from(tokens).join(" ");
-    }, [target, rel]);
+    const safeRel = React.useMemo(() => buildSafeRel(target, rel), [target, rel]);

🤖 Prompt for AI Agents

Verify each finding against the current code and only fix it if needed.

In `@src/components/DropdownMenu.tsx` around lines 114 - 122, The safeRel
construction in DropdownMenu (the React.useMemo that computes safeRel) is
duplicated with InlineLink; extract a small shared helper function like
buildSafeRel(target, rel) that centralizes adding "noopener" and "noreferrer"
when target === "_blank" and returns the joined string, then replace the inline
useMemo in DropdownMenu (and the logic in InlineLink) to call
buildSafeRel(target, rel); update imports where needed and ensure both
components use the same helper to avoid security-policy drift.