DPGNotes Legal
Home Legal Hub

Overview

  • Main Platform
  • Legal Summary Hub
  • Policy Updates

Standalone Policies

  • Privacy Policy
  • Terms & Conditions
  • Cookie Policy
  • Advertising Policy
  • Legal Disclaimer
  • DRASA Regulations
  • Copyright Policy
  • DMCA Policy
  • Tracking & Analytics
  • Security Policy
  • Data Retention
  • External Links
Official Policy • DPDP Act 2023 & AdSense Compliant

DPGNotes External Links Policy

Last Revised: September 2026 Reference: POL-DPG-LINK-2026-V3.2 Version: 3.2 (Comprehensive Edition)
Looking for a quick executive summary? Visit the Summary Version of this Policy in Legal Hub.

1. Institutional Objective & Outbound Interception Architecture

To shield students, research scholars, and academic contributors from malicious redirects, phishing domains, malware distribution networks, and unverified commercial traps, DPGNotes operates an integrated client-side External Link Interception Architecture. Because educational notes frequently reference external syllabi, digital library archives, research papers, and software repositories, students often navigate across institutional boundaries.

Whenever a user clicks a hyperlink leading beyond the trusted perimeter of DPGNotes, our system halts immediate execution, analyzes the target URL, and presents an informative confirmation modal detailing the destination domain, security status, and navigational options.

Transparent Interception

Alerts students before they leave the platform, displaying the full unmasked destination address and protocol.

Trusted Whitelist

Seamless direct transit for verified ecosystem partners including DigiIndia Student Search Engine.

Exploit Shielding

Mandatory injection of rel="noopener noreferrer" attributes to neutralize reverse tab-nabbing vulnerabilities.

2. The Trusted Internal Whitelist Architecture

To reconcile student digital safety with smooth academic navigation, DPGNotes maintains an auditable Trusted Domain Whitelist. Hyperlinks pointing to verified first-party platforms, partner academic search engines, and authorized infrastructure providers bypass the interceptor dialog entirely and execute instantly:

Domain Designation Whitelisted Hostnames / Patterns Platform Relationship Interceptor Status
DPGNotes Core dpgnotes.web.app, dpgnotes.firebaseapp.com Primary official production hosting nodes. Bypasses Interceptor (Direct)
DigiIndia Platform digiindia-student-platform.onrender.com, *digiindia* Official student search engine & academic directory partner. Bypasses Interceptor (Direct)
Local & Dev Environments localhost, 127.0.0.1, 0.0.0.0 Authorized local testing, offline previews, and sandboxes. Bypasses Interceptor (Direct)
Official Source Code github.com/akshat-network-hub/* Open-source DPGNotes project repositories and mirrors. Bypasses Interceptor (Direct)
External Third-Parties All other unverified public domains (e.g., YouTube, Drive, Wikipedia) Independent external resources and references. Intercepted (Warning Modal)

3. The Link Interception Modal Lifecycle & UX Safeguards

When an outbound link targeting an external domain is engaged, the platform triggers our unified modal lifecycle:

  • Immediate Event Prevention: The default browser action (event.preventDefault()) arrests navigation before any third-party script can be downloaded.
  • Protocol & Hostname Extraction: The target URL is parsed using the standard URL API to extract the full hostname, protocol, and path, stripping hidden cross-site tracking parameters.
  • Safety Disclosure Presentation: A high-contrast modal dialog renders the exact destination hostname, alerting the student that they are stepping outside the DPGNotes legal and privacy boundary.
  • Voluntary Confirmation: The user must affirmatively choose between "Proceed to External Site" (which opens the target in an isolated new tab) or "Stay on DPGNotes" (which aborts the navigation).

4. Anti-Exploit Security Controls (Reverse Tab-Nabbing Defense)

Unrestricted hyperlinks with target="_blank" expose users to a critical web security vulnerability known as Reverse Tab-Nabbing, wherein the newly opened third-party site utilizes window.opener.location to silently redirect the background DPGNotes tab to a counterfeit phishing login screen. DPGNotes strictly neutralizes this threat:

  • Mandatory rel="noopener": Instructs the browser to open the target link without granting the new page an execution reference to the opener tab, maintaining complete thread isolation.
  • Mandatory rel="noreferrer": Prevents the browser from transmitting the full URL containing sensitive student search parameters in the Referer HTTP header to the foreign server.

5. Guidelines for Student Contributor Hyperlinks

Student contributors authoring study guides, revision notes, and lab manuals are encouraged to cite authoritative academic sources. However, contributor links must strictly comply with platform standards:

  • Permitted References: Official university syllabus pages, government statutory educational portals (NPTEL, SWAYAM, UGC, AICTE), accredited open-access academic papers (arXiv, IEEE Open), and standard textbook publisher indices.
  • Prohibited Links: Shortened URLs (e.g., bit.ly, tinyurl) that obscure destination identity; commercial essay-writing services; gambling platforms; pirated PDF torrent websites; or unencrypted HTTP links.

6. Sponsored Hyperlinks & Affiliate Disclosure Standards

Where external links lead to sponsored educational software, student discounts, or approved affiliate partnerships, DPGNotes enforces strict commercial transparency in accordance with the Federal Trade Commission (FTC) Guides (16 CFR Part 255) and the Advertising Standards Council of India (ASCI):

  • All outgoing commercial hyperlinks are tagged with mandatory rel="sponsored" or rel="nofollow" HTML attributes.
  • Sponsored outbound destinations are clearly identified with badge markers, ensuring no confusion with non-commercial university resources.

7. Disclaimer of Third-Party Liability & Non-Endorsement

DPGNotes does not exercise editorial supervision, operational control, or security monitoring over external web properties. The appearance of an external hyperlink does not constitute an institutional endorsement, warranty, or recommendation of the foreign site, its operator, or its content. DPGNotes expressly disclaims any legal liability for damages, malware infections, data interception, or financial loss incurred on third-party domains.

8. Broken Link Reporting & Rapid Takedown Protocol

If you encounter an outbound hyperlink within our notes that is broken, leads to a parked advertising domain, or directs students to an inappropriate or malicious website, please report it immediately to our Link Integrity Desk:

External Link Integrity & Safety Desk

DPGNotes Platform Navigation & Domain Security Board

Official Security Email: its.akshatnetworkhub23@gmail.com

Support & Malicious Link Ticket: Support & Safety Portal

Response SLA: Malicious external links delisted within 24 business hours.

Related Compliance Policies

Privacy Policy Legal Disclaimer Security Policy Terms & Conditions