3 ms·
Regarding the new Referrer-Policy header introduction, what happens when my network.http.sendRefererHeader is 0, network.http.sendSecureXSiteReferrer is false a
by conductor 10y ago
Regarding the new Referrer-Policy header introduction, what happens when my network.http.sendRefererHeader is 0, network.http.sendSecureXSiteReferrer is false and some website sets a Referrer-Policy: "unsafe-url" header? Which setting has the priority?
- bzbarsky 10y agoThe logic is basically like so: 1) Is the site requesting a "no-referrer" policy? Then send no referer. 2) Is network.http.sendRefererHeader set to a value that would prevent sending of referrer in this situation (e.g. 0 in all situations)? Then send no referrer. 3) All the other logic (but generally aiming to follow the most restrictive directive we have). The "network.http.sendSecureXSiteReferrer" still exists in 50, but is gone in 52; see https://bugzilla.mozilla.org/show_bug.cgi?id=1308725 https://bugzilla.mozilla.org/show_bug.cgi?id=1308725
- conductor 10y agoThanks for clarifying, that's logical of course (user preferences should have priority).