Performed a security audit and hardened the codebase against XSS and tab-nabbing vulnerabilities. I wrote a custom sanitizeURL wrapper for the existing escapeHTML utility across the gallery JavaScript files to strictly block malicious javascript: and data: protocols. I also patched an external target=”_blank” link in the Leaders of Tomorrow page to include rel=“noopener noreferrer”, and cleaned up outdated form-handling references in our AGENTS.md documentation.