Open homepage destinations in new tabs consistently

Author: rodrix2000

IMPLEMENTATION-NOTES.md

@@ -103,6 +103,32 @@ while preserving the homepage. The mobile menu still closed after activation,
 with no horizontal overflow. Source/reduced-motion checks and HTML validation
 passed; the only console warning was the existing analytics localhost notice.
 
+### Homepage-wide destination links — 2026-08-30
+
+Starting from `fa0b2f09142996aff27ba2eb1eee6054c815d202`, all 43 homepage links
+to other pages now open new tabs, including Explore themes, the announcement,
+system/CLI links, mobile navigation, community, footer credits and all five
+video posters. Each uses `target="_blank"`, `rel="noopener noreferrer"` and an
+accessible new-tab announcement. Existing CTA arrows point diagonally where
+appropriate. All 57 original anchor destinations are unchanged.
+
+The three ISO anchors remain byte-for-byte unchanged. The ten home/section
+navigation links stay in the current tab, and the email link retains native
+mail-handler behavior. This policy is scoped to the redesigned homepage, not
+the inherited manual or other secondary pages. The introduction poster no
+longer opts into the inline player, so its click opens YouTube consistently
+with the other four videos. No JavaScript or CSS changes were required.
+
+`bin/check` now audits the complete homepage link policy, including the native
+exceptions and prevention of inline-video interception. Source, HTML and
+reduced-motion checks passed. A browser DOM audit found no policy violations.
+Explore themes opened separate tabs at 1440px and 390px; desktop section
+navigation stayed in place, the introduction video opened YouTube without an
+inline iframe, and mobile Security opened separately while closing the menu.
+The homepage remained open throughout, with no horizontal overflow. The only
+console warning was the existing analytics localhost notice. ISO downloads
+and the email application were deliberately not activated during testing.
+
 ### Push-to-deploy automation — 2026-08-30
 
 Starting from `f728d6ab0d47da60b49269affa7cced2d2bd94e7`, the existing validation

README.md

@@ -43,7 +43,9 @@ development tool, not a production server.
 - All content and links remain available without JavaScript.
 - Reduced-motion support, keyboard navigation and visible focus states.
 - Responsive layouts verified at 1440px and 390px, with intermediate checks.
-- Video posters load a player only after activation; other videos remain links.
+- All five video posters open YouTube in a new tab; no player loads on the homepage.
+- Homepage destination links open new tabs; ISO downloads, home/section navigation
+  and email links retain their native behavior.
 
 The main changes are in `index.html`, `assets/css/home.css`, and
 `assets/js/modules/home.js`. Existing public routes and upstream history remain.

bin/check

@@ -59,6 +59,32 @@ Dir.chdir(root) do
 
   hrefs = tags.filter_map { |name, attributes| attributes["href"] if name == "a" }
   abort "Homepage has an empty or JavaScript-only link" if hrefs.any? { |href| href.empty? || href.match?(/\Ajavascript:/i) }
+
+  # A single homepage-wide policy prevents isolated CTA/footer regressions.
+  link_counts = Hash.new(0)
+  tags.select { |name, _attributes| name == "a" }.each do |_name, link|
+    href = link.fetch("href", "")
+    kind = if href.match?(%r{\Ahttps://iso\.omarchy\.org/[^?#]+\.iso(?:[?#].*)?\z})
+      :iso
+    elsif href == "/" || href.start_with?("#")
+      :same_page
+    elsif href.start_with?("mailto:")
+      :email
+    else
+      :destination
+    end
+    link_counts[kind] += 1
+
+    if kind == :destination
+      abort "Destination must open a safe new tab: #{href}" unless link["target"] == "_blank" && (%w[noopener noreferrer] - link.fetch("rel", "").split).empty?
+      abort "Missing new-tab accessibility hint: #{href}" unless link.fetch("aria-label", "").include?("opens in a new tab")
+      abort "A new-tab destination must not activate an inline video: #{href}" if link.key?("data-video")
+    else
+      abort "Keep #{kind} link behavior unchanged: #{href}" if link.key?("target")
+    end
+  end
+  puts "PASS: all #{link_counts[:destination]} homepage destinations open safe, labeled new tabs; #{link_counts[:iso]} ISO downloads, #{link_counts[:same_page]} home/section links and #{link_counts[:email]} email link retain native behavior."
+
   resources = tags.flat_map { |_name, attributes| attributes.values_at("href", "src") }.compact
   local_paths = resources.select { |value| value.start_with?("/") && !value.start_with?("//") }.map { |value| value.split(/[?#]/, 2).first }.uniq
   local_paths.each do |path|