3 ms·

GitHub CSRF Broken in Chrome?

1 points by philip1209 11y ago

The HTML source of Github has this source: ``` <meta content="origin-when-cross-origin" name="referrer" /> ``` I believe that this is triggering this error in chrome: ``` Failed to set referrer policy: The value 'origin-when-cross-origin' is not one of 'no-referrer', 'origin', 'no-referrer-when-downgrade', or 'unsafe-url'. Defaulting to 'no-referrer'. ``` I'm getting a 422 error from Github when I try to submit a pull request.