The same logic should be applied to the inclusion of a Referer header in a request. If a page on foo.com is pulling down a .js from code.jquery.com, there shoul

The same logic should be applied to the inclusion of a Referer header in a request. If a page on foo.com is pulling down a .js from code.jquery.com, there should be no Referer sent. Perhaps a more illustrative example is that this will deny Twitter, FB, Google and other embeddable widget factories any tracking and analytics information that leaks with every request for TweetThis, LikeThat and WhatNot buttons, fonts and scripts. There is absolutely no reason for them to be seeing this information.