diff --git a/svelte/src/admin_panel/AbuseReport.svelte b/svelte/src/admin_panel/AbuseReport.svelte
index 34a3697..06129e9 100644
--- a/svelte/src/admin_panel/AbuseReport.svelte
+++ b/svelte/src/admin_panel/AbuseReport.svelte
@@ -50,7 +50,7 @@ let set_status = async (action, report_type) => {
 	<div class="details">
 		<div class="toolbar">
 			<div style="flex: 1 1 auto">
-				<a class="button" target="_blank" href={"/u/"+report.file.id}>
+				<a class="button" target="_blank" href={"/u/"+report.file.id} rel="noreferrer">
 					<i class="icon">open_in_new</i> Open file
 				</a>
 				<button class:button_highlight={preview} on:click={() => {preview = !preview}}>
diff --git a/svelte/src/file_viewer/CustomBanner.svelte b/svelte/src/file_viewer/CustomBanner.svelte
index 7c10590..2261385 100644
--- a/svelte/src/file_viewer/CustomBanner.svelte
+++ b/svelte/src/file_viewer/CustomBanner.svelte
@@ -7,7 +7,7 @@ export let border_top = false;
 {#if src}
 	<div class:border_top>
 		{#if link}
-			<a href={link} target="_blank">
+			<a href={link} target="_blank" rel="noreferrer">
 				<img class="image" src="{src}" alt="User-provided banner"/>
 			</a>
 		{:else}
diff --git a/svelte/src/file_viewer/DetailsWindow.svelte b/svelte/src/file_viewer/DetailsWindow.svelte
index 6b071e6..cda819b 100644
--- a/svelte/src/file_viewer/DetailsWindow.svelte
+++ b/svelte/src/file_viewer/DetailsWindow.svelte
@@ -209,7 +209,7 @@ onMount(() => {
 	<Chart bind:this={chart} />
 
 	<p style="text-align: center">
-		Charts rendered by the amazing <a href="https://www.chartjs.org/" target="_blank">Chart.js</a>.
+		Charts rendered by the amazing <a href="https://www.chartjs.org/" target="_blank" rel="noreferrer">Chart.js</a>.
 	</p>
 
 	<h3>Keyboard Controls</h3>
diff --git a/svelte/src/file_viewer/viewers/RateLimit.svelte b/svelte/src/file_viewer/viewers/RateLimit.svelte
index 88aee1e..d1bc65a 100644
--- a/svelte/src/file_viewer/viewers/RateLimit.svelte
+++ b/svelte/src/file_viewer/viewers/RateLimit.svelte
@@ -49,7 +49,7 @@ let file = {
 	{/if}
 	<p>
 		This warning disappears when the you are a
-		<a href="https://www.patreon.com/join/pixeldrain/checkout?rid=5736701&cadence=12" target="_blank">Patreon supporter</a>,
+		<a href="https://www.patreon.com/join/pixeldrain/checkout?rid=5736701&cadence=12" target="_blank" rel="noreferrer">Patreon supporter</a>,
 		or when the uploader of the file enables
 		<a href="/user/subscription">bandwidth sharing</a> on their Pro account
 		(and their data cap has not been used up). Using a download manager with
diff --git a/svelte/src/home_page/FeatureTable.svelte b/svelte/src/home_page/FeatureTable.svelte
index e4d95d7..911a428 100644
--- a/svelte/src/home_page/FeatureTable.svelte
+++ b/svelte/src/home_page/FeatureTable.svelte
@@ -196,8 +196,8 @@ onMount(() => {
 	</p>
 	<p>
 		More information about <a
-		href="https://en.wikipedia.org/wiki/Inline_linking"
-		target="_blank">Hotlinking on Wikipedia</a>.
+		href="https://en.wikipedia.org/wiki/Inline_linking" target="_blank"
+		rel="noreferrer">Hotlinking on Wikipedia</a>.
 	</p>
 	<h3>Hotlinking with a Pro subscription</h3>
 	<p>
diff --git a/svelte/src/layout/Footer.svelte b/svelte/src/layout/Footer.svelte
index 78a0f0d..6db17b6 100644
--- a/svelte/src/layout/Footer.svelte
+++ b/svelte/src/layout/Footer.svelte
@@ -9,22 +9,23 @@ import Twitter from "../icons/Twitter.svelte";
 <footer>
 	<div class="footer_content">
 		<div style="display: inline-block; margin: 0 8px;">
-			Pixeldrain is a product by <a href="//fornaxian.tech" target="_blank">Fornaxian Technologies</a>
+			Pixeldrain is a product by
+			<a href="//fornaxian.tech" target="_blank" rel="noreferrer">Fornaxian Technologies</a>
 		</div>
 		<div style="display: inline-block; margin: 0 8px;">
-			<a href="https://www.patreon.com/pixeldrain" target="_blank">
+			<a href="https://www.patreon.com/pixeldrain" target="_blank" rel="noreferrer">
 				<Patreon style="color: var(--body_text_color);"/> Patreon
 			</a> |
-			<a href="https://twitter.com/Fornax96" target="_blank">
+			<a href="https://twitter.com/Fornax96" target="_blank" rel="noreferrer">
 				<Twitter style="color: var(--body_text_color);"/> Twitter
 			</a> |
-			<a href="https://reddit.com/r/pixeldrain" target="_blank">
+			<a href="https://reddit.com/r/pixeldrain" target="_blank" rel="noreferrer">
 				<Reddit style="color: var(--body_text_color);"/> Reddit
 			</a> |
-			<a href="https://github.com/Fornaxian" target="_blank">
+			<a href="https://github.com/Fornaxian" target="_blank" rel="noreferrer">
 				<Github style="color: var(--body_text_color);"/> GitHub
 			</a> |
-			<a href="https://mastodon.social/web/@fornax" target="_blank">
+			<a href="https://mastodon.social/web/@fornax" target="_blank" rel="noreferrer">
 				<Mastodon style="color: var(--body_text_color);"/> Mastodon
 			</a>
 		</div>
diff --git a/svelte/src/text_upload/TextUpload.svelte b/svelte/src/text_upload/TextUpload.svelte
index 617334e..de502fe 100644
--- a/svelte/src/text_upload/TextUpload.svelte
+++ b/svelte/src/text_upload/TextUpload.svelte
@@ -100,7 +100,7 @@ const keydown = e => {
 	</p>
 	<p>
 		The text editor has been enhanced by Jacob Kelley's
-		<a href="https://jakiestfu.github.io/Behave.js/" target="_blank">Behave.js</a>.
+		<a href="https://jakiestfu.github.io/Behave.js/" target="_blank" rel="noreferrer">Behave.js</a>.
 
 		Many thanks to him for developing this plugin and putting it
 		under the MIT license.
diff --git a/svelte/src/user_file_manager/DirectoryElement.svelte b/svelte/src/user_file_manager/DirectoryElement.svelte
index fe0e6b4..ec38821 100644
--- a/svelte/src/user_file_manager/DirectoryElement.svelte
+++ b/svelte/src/user_file_manager/DirectoryElement.svelte
@@ -314,6 +314,7 @@ const node_click = (index) => {
 					<a class="node"
 						href={file.href}
 						target="_blank"
+						rel="noreferrer"
 						title="{file.name}"
 						class:node_selected={file.selected}
 						on:click|preventDefault={() => {node_click(index)}}
diff --git a/svelte/src/user_home/ConnectApp.svelte b/svelte/src/user_home/ConnectApp.svelte
index 309b93b..65a236c 100644
--- a/svelte/src/user_home/ConnectApp.svelte
+++ b/svelte/src/user_home/ConnectApp.svelte
@@ -81,8 +81,8 @@ onMount(() => {
 		<h3>Step 1: Install JDownloader</h3>
 		<p>
 			Download JDownloader from its website:
-			<a href="https://jdownloader.org/download/index"
-			target="_blank">jdownloader.org</a>. Open JDownloader from your
+			<a href="https://jdownloader.org/download/index" target="_blank"
+			rel="noreferrer">jdownloader.org</a>. Open JDownloader from your
 			start menu after the installation is complete.
 		</p>
 		<h3>Step 2: Open the account manager</h3>
@@ -149,8 +149,8 @@ onMount(() => {
 		<p>
 			ShareX is a Screen capture, file sharing and productivity tool.
 			Pixeldrain is supported as a custom uploader. You can <a
-			href="https://getsharex.com/" target="_blank">get ShareX
-			here</a>.
+			href="https://getsharex.com/" target="_blank" rel="noreferrer">get
+			ShareX here</a>.
 		</p>
 		<p>
 			Here you can download our custom ShareX uploader which uses
diff --git a/svelte/src/user_home/DepositCredit.svelte b/svelte/src/user_home/DepositCredit.svelte
index fbc87a2..aabd281 100644
--- a/svelte/src/user_home/DepositCredit.svelte
+++ b/svelte/src/user_home/DepositCredit.svelte
@@ -83,9 +83,9 @@ onMount(() => {
 	<p>
 		Alternatively you can use Bitcoin, Lightning network (<a
 		href="https://btcpay.pixeldrain.com/embed/uS2mbWjXUuaAqMh8XLjkjwi8oehFuxeBZxekMxv68LN/BTC/ln"
-		target="_blank">node info</a>) and Dogecoin to deposit credits on your
-		pixeldrain account. You must pay the full amount as stated on the
-		invoice, else your payment will fail.
+		target="_blank" rel="noreferrer">node info</a>) and Dogecoin to deposit
+		credits on your pixeldrain account. You must pay the full amount as
+		stated on the invoice, else your payment will fail.
 	</p>
 	<p>
 		Do note that it is not possible to withdraw coins from your
diff --git a/svelte/src/user_home/Home.svelte b/svelte/src/user_home/Home.svelte
index cb3a475..f0a3334 100644
--- a/svelte/src/user_home/Home.svelte
+++ b/svelte/src/user_home/Home.svelte
@@ -198,7 +198,7 @@ onDestroy(() => {
 					wait until the payment is confirmed and try again. You can
 					see the status of your payment <a
 					href="https://www.patreon.com/pledges?ty=h"
-					target="_blank">on Patreon itself</a>.
+					target="_blank" rel="noreferrer">on Patreon itself</a>.
 				</p>
 				<p>
 					If your payment is complete and your account is still not