3 ms·
If the link is for users to click and like this page on Facebook, then Facebook will be able to know the source URL regardless, no?
by yzmtf2008 7y ago
If the link is for users to click and like this page on Facebook, then Facebook will be able to know the source URL regardless, no?
- daxterspeed 7y agoWell if the referrer header matches the shared url it's just bloat in the request headers, and if it doesn't it's possibly leaking details it shouldn't, like perhaps a token in a query parameter. Twitter, Facebook, etc doesn't really need to know where a user initiated a share anyway. Either way making sure that window.opener isn't available to random sites is a critical security feature and in some browsers that require you to set noreferrer, so better safe than sorry.