diff --git a/xP/public/xP.js b/xP/public/xP.js
index d34ddf8..a6cc303 100644
--- a/xP/public/xP.js
+++ b/xP/public/xP.js
@@ -529,7 +529,8 @@ let Content = {
 		while ((match = re.exec(text)) !== null) {
 			if (end < match.index)
 				a.push(m('span', attrs, text.substring(end, match.index)))
-			a.push(m('a[target=_blank]', {href: match[0], ...attrs}, match[0]))
+			a.push(m('a[target=_blank][rel=noreferrer]',
+				{href: match[0], ...attrs}, match[0]))
 			end = re.lastIndex
 		}
 		if (end < text.length)
@@ -707,7 +708,8 @@ let Log = {
 		while ((match = re.exec(text)) !== null) {
 			if (end < match.index)
 				a.push(text.substring(end, match.index))
-			a.push(m('a[target=_blank]', {href: match[0]}, match[0]))
+			a.push(m('a[target=_blank][rel=noreferrer]',
+				{href: match[0]}, match[0]))
 			end = re.lastIndex
 		}
 		if (end < text.length)