same origin referrer policy to protect user privacy, if supported by browser. same origin to prevent issues with same site links and posting referrer checks

gulp/res/css/style.css

@@ -122,11 +122,14 @@ object {
 	max-height: 300px;
 	width: 250px;
 	overflow: hidden;
-	overflow-y: auto;
 	border: 2px solid #B7C5D9;
 	box-sizing: border-box;
 }
 
+.catalog-tile:hover {
+	overflow-y: scroll;
+}
+
 p {
 	margin: 5px;
 }
@@ -641,7 +644,6 @@ hr {
 	}
 
 	.catalog-tile {
-		overflow-y: hidden;
 		width: 50%;
 		margin: 0 0 2px 0;
 	}
@@ -651,10 +653,6 @@ hr {
 		width: calc(50% - 2px);
 	}
 
-	.catalog-tile:hover {
-		overflow-y: scroll;
-	}
-
 	.table-body {
 		width: 100%;
 	}

helpers/posting/markdown.js

@@ -15,7 +15,7 @@ const Posts = require(__dirname+'/../../db/posts.js')
 
 module.exports = (text) => {
 
-	//pinktext
+	//pinktext 
 	text = text.replace(pinktextRegex, (match, pinktext) => {
 		return `<span class='pinktext'>&lt;${pinktext}</span>`;
 	});
@@ -27,7 +27,7 @@ module.exports = (text) => {
 
 	//links
 	text = text.replace(linkRegex, (match) => {
-		return `<a href="${match}">${match}</a>`;
+		return `<a referrerpolicy='strict-origin' href='${match}'>${match}</a>`;
 	});
 
 	//bold