From 9e1ff679d233753e06b3af2d11ba719ce9c4126f Mon Sep 17 00:00:00 2001
From: seonghobae <8172694+seonghobae@users.noreply.github.com>
Date: Tue, 13 Oct 2026 08:38:52 +0000
Subject: [PATCH] =?UTF-8?q?=F0=9F=8E=A8=20Palette:=20[=EC=A0=91=EA=B7=BC?=
 =?UTF-8?q?=EC=84=B1=20=EA=B0=9C=EC=84=A0]=20=EC=99=B8=EB=B6=80=20?=
 =?UTF-8?q?=EB=A7=81=ED=81=AC=EC=97=90=20=EB=B3=B4=EC=A1=B0=20=EA=B8=B0?=
 =?UTF-8?q?=EA=B8=B0=20=EB=B0=8F=20=EC=8B=9C=EA=B0=81=EC=A0=81=20=EA=B2=BD?=
 =?UTF-8?q?=EA=B3=A0=20=EC=B6=94=EA=B0=80?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .jules/palette.md            | 4 ++++
 scanner/dashboard/index.html | 2 +-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/.jules/palette.md b/.jules/palette.md
index ea004e2d2..b593f18f2 100644
--- a/.jules/palette.md
+++ b/.jules/palette.md
@@ -81,3 +81,7 @@
 ## 2026-08-12 - Skip to Content Accessibility
 **Learning:** Screen reader and keyboard-only users experience significant friction when forced to navigate through repetitive header controls on every page load.
 **Action:** Keep a visible-on-focus skip link as the first interactive element, target a programmatically focusable main container, and give the focused link a high-contrast outline.
+
+## 2026-08-14 - External Links Accessibility Warning
+**Learning:** Links opening in a new tab (`target="_blank"`) disorient screen reader users if no context is given, and visually hiding the warning from sighted users or overriding the visible text with `aria-label` breaks localization and visible context.
+**Action:** Always provide an explicit assistive-technology warning (e.g., visually hidden `.sr-only` text) and a visible indicator (e.g., `aria-hidden="true"` icon) instead of English-only `aria-label` overrides.
diff --git a/scanner/dashboard/index.html b/scanner/dashboard/index.html
index 132bc31b2..8e939044d 100644
--- a/scanner/dashboard/index.html
+++ b/scanner/dashboard/index.html
@@ -281,7 +281,7 @@ <h1>Dashboard</h1>
 function openDetail(f){
   lastFocus = document.activeElement;
   const s = String(f.severity||'INFO').toUpperCase();
-  const refs = (f.references||[]).map(r=>`<a href="${esc(safeUrl(r))}" target="_blank" rel="noopener">${esc(r)}</a>`).join('<br>');
+  const refs = (f.references||[]).map(r=>`<a href="${esc(safeUrl(r))}" target="_blank" rel="noopener noreferrer">${esc(r)} <span class="sr-only">(opens in new tab)</span><span aria-hidden="true">↗</span></a>`).join('<br>');
   const owasp = (f.owasp||[]).join(', ');
   const cwe = (f.cwe||[]).join(', ');
   const d = document.getElementById('detail');