From a6fe820a6108d57e457361293108eab29839f3aa Mon Sep 17 00:00:00 2001
From: Gmer4Lfe <gmer4lfe@gmail.com>
Date: Sat, 4 Jul 2026 23:05:47 -0400
Subject: [PATCH] Fix external-link warning on tab navigation
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Tab links use relative query-string hrefs (?tab=scheduler), which fail
every check in Unraid's global external-link click-guard (BodyInlineJS.php):
not a valid absolute URL, doesn't start with "/", doesn't match a
registered plugin page basename. Confirmed live — the guard's dom.hostname
ends up undefined for these, matching the reported "Always Allow undefined"
dialog text exactly.

Fix: add class="localURL", the same escape hatch dynamix's own pages
(ManagementAccess.page) use for this exact situation. Applied to the main
tab bar and the setup wizard's checklist action links (?tab=partnership).
---
 Plugin/unraid/Varaverk.page   | 2 +-
 Plugin/unraid/pages/setup.php | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/Plugin/unraid/Varaverk.page b/Plugin/unraid/Varaverk.page
index f80e495..1c2fc5a 100644
--- a/Plugin/unraid/Varaverk.page
+++ b/Plugin/unraid/Varaverk.page
@@ -36,7 +36,7 @@ $tabLabels = ['monitor' => 'Monitor', 'scheduler' => 'Scheduler', 'docker' => 'D
   <!-- Tab bar -->
   <div id="vv-tabs">
     <?php foreach ($validTabs as $t): ?>
-      <a href="?tab=<?=$t?>" class="vv-tab<?= $t === $tab ? ' active' : '' ?>">
+      <a href="?tab=<?=$t?>" class="localURL vv-tab<?= $t === $tab ? ' active' : '' ?>">
         <?= $tabLabels[$t] ?? ucfirst($t) ?>
       </a>
     <?php endforeach; ?>
diff --git a/Plugin/unraid/pages/setup.php b/Plugin/unraid/pages/setup.php
index 170b221..c3bd048 100644
--- a/Plugin/unraid/pages/setup.php
+++ b/Plugin/unraid/pages/setup.php
@@ -312,7 +312,7 @@ function vvLoadChecklist() {
           const lbl  = vvActionLabels[item.action] || item.action;
           const href = vvActionHref[item.action];
           if (href) {
-            act = `<div class="vv-cl-act"><a href="${href}" style="font-size:11px;color:#556;">${lbl}</a></div>`;
+            act = `<div class="vv-cl-act"><a href="${href}" class="localURL" style="font-size:11px;color:#556;">${lbl}</a></div>`;
           } else if (item.action === 'create_key') {
             act = `<div class="vv-cl-act"><button onclick="vvCreateKey(this)">${lbl}</button></div>`;
           } else if (item.action === 'run_populate') {