3 ms·
Color me stupid, but I thought all major browsers already stripped referrer info when navigating from HTTPS? The examples used don't make sense to me if that's
by kemitche 9y ago
Color me stupid, but I thought all major browsers already stripped referrer info when navigating from HTTPS? The examples used don't make sense to me if that's true.
- groovecoder 9y agoThe default user agent policy is no-referrer-when-downgrade, which strips the referrer header going from HTTPS pages to HTTP resources. Firefox 59 PBM now implements strict-origin-when-cross-origin by default, which trims the path off the referrer value of ALL 3rd-party requests.