2 ms·
> ITP now downgrades all cross-site request referrer headers to just the page’s origin What is meant by cross-site here? Does it mean a different eTLD+1, or a
by thayne 7y ago
> ITP now downgrades all cross-site request referrer headers to just the page’s origin
What is meant by cross-site here? Does it mean a different eTLD+1, or a different origin (as used by CORS)?
Specifically, if I make a request from https://www.example.com/path?query https://www.example.com/path?query to https://api.example.com https://api.example.com will the referer header contain the "/path?query"? or will that get blocked as well?