From fa586d4758a6dcc96f7b219385c7fdff4947727b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C3=89mile=20R=C3=A9?= <emile@getprobo.com>
Date: Wed, 28 Jan 2026 22:12:46 +0400
Subject: [PATCH] Safe link opening and stronger permission
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Émile Ré <emile@getprobo.com>
---
 .../overview/_components/CompliancePageNDASection.tsx          | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/apps/console/src/pages/organizations/compliance-page/overview/_components/CompliancePageNDASection.tsx b/apps/console/src/pages/organizations/compliance-page/overview/_components/CompliancePageNDASection.tsx
index e15117af3..288677c01 100644
--- a/apps/console/src/pages/organizations/compliance-page/overview/_components/CompliancePageNDASection.tsx
+++ b/apps/console/src/pages/organizations/compliance-page/overview/_components/CompliancePageNDASection.tsx
@@ -129,6 +129,7 @@ export function CompliancePageNDASection(props: { fragmentRef: CompliancePageNDA
                             window.open(
                               organization.compliancePage.ndaFileUrl,
                               "_blank",
+                              "noopener,noreferrer",
                             );
                           }
                         }}
@@ -149,7 +150,7 @@ export function CompliancePageNDASection(props: { fragmentRef: CompliancePageNDA
               )
             : (
                 <>
-                  {organization.compliancePage?.canUpdate
+                  {organization.compliancePage?.canUploadNDA
                     ? (
                         <Dropzone
                           description={__("Upload PDF files up to 10MB")}