fix: Update player retrieval filter to use UsernameAndGuid and enhance player link security in RconPlayers

Author: frasermolyneux

src/XtremeIdiots.Portal.Web/Controllers/ServerAdminController.cs

@@ -325,7 +325,7 @@ private async Task<object> EnrichRconPlayerDataAsync(dynamic rconPlayer, GameTyp
             {
                 // Search for player by GUID using GetPlayers with filter
                 var playerResponse = await repositoryApiClient.Players.V1.GetPlayers(
-                    gameType, null, guid, 0, 1, PlayersOrder.LastSeenDesc, PlayerEntityOptions.None).ConfigureAwait(false);
+                    gameType, PlayersFilter.UsernameAndGuid, guid, 0, 1, PlayersOrder.LastSeenDesc, PlayerEntityOptions.None).ConfigureAwait(false);
 
                 if (playerResponse.IsSuccess && playerResponse.Result?.Data?.Items?.Any() == true)
                 {
@@ -1509,7 +1509,7 @@ private async Task CreateAdminActionForRconOperationAsync(
         {
             // Try to find existing player profile by searching with GUID
             var playerResponse = await repositoryApiClient.Players.V1.GetPlayers(
-                gameType, null, playerGuidStr, 0, 1, PlayersOrder.LastSeenDesc, PlayerEntityOptions.None).ConfigureAwait(false);
+                gameType, PlayersFilter.UsernameAndGuid, playerGuidStr, 0, 1, PlayersOrder.LastSeenDesc, PlayerEntityOptions.None).ConfigureAwait(false);
 
             if (!playerResponse.IsSuccess || playerResponse.Result?.Data?.Items?.Any() != true)
             {

src/XtremeIdiots.Portal.Web/wwwroot/js/rcon-players.js

@@ -65,7 +65,7 @@ var RconPlayers = (function () {
                     data: 'name', name: 'name',
                     render: function (data, type, row) {
                         if (row.playerId) {
-                            return '<a href="/Players/Details/' + row.playerId + '">' + CodColors.renderSafe(row.name) + '</a>';
+                            return '<a href="/Players/Details/' + row.playerId + '" target="_blank" rel="noopener noreferrer">' + CodColors.renderSafe(row.name) + '</a>';
                         }
                         return CodColors.renderSafe(row.name);
                     }