Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions ecosystem.md
Original file line number Diff line number Diff line change
Expand Up @@ -91,6 +91,11 @@ To add to this list, <a href="https://github.com/simplefin/simplefin.github.com/
<div class="item-desc">Simple Budgeting, Powerful Results</div>
</a>

<a class="item" href="https://zapyeti.com" target="_blank">
Copy link

Copilot AI Feb 16, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The new external link uses target="_blank" without rel="noopener" (or rel="noopener noreferrer"), which exposes the site to reverse tabnabbing. If https://zapyeti.com is compromised or malicious, it can use window.opener to navigate the original SimpleFIN page to a phishing or attacker-controlled URL in the same tab. Add an appropriate rel attribute to this anchor to prevent the new tab from gaining control of the opener window.

Copilot uses AI. Check for mistakes.
<div class="item-title"><img src="/img/applogos/zapyeti.png" title="ZapYeti logo"> ZapYeti</div>
<div class="item-desc">Debt payoff calculator and tracker</div>
</a>

<a class="item" href="https://envelopebudget.com" target="_blank">
<div class="item-title"><img src="/img/applogos/envelopebudget.png" title="EnvelopeBudget logo"> EnvelopeBudget</div>
<div class="item-desc">Envelope method for the digital age</div>
Expand Down
Binary file added img/applogos/zapyeti.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading