[Bug 9603] If the origin parameter does not match the Document origin the Referer header should also be excluded. Alternatively a way to omit the Referer header would be good for CORS.

http://www.w3.org/Bugs/Public/show_bug.cgi?id=9603





--- Comment #1 from Ian 'Hixie' Hickson <ian@hixie.ch>  2010-08-24 18:49:01 ---
To omit the Referer header, you just have to say that the Referer header isn't
sent. (See for instance the "noreferrer" link type, which does this.) There's
not much more I can do in HTML5, since HTTP doesn't provide suitable hooks
here.

-- 
Configure bugmail: http://www.w3.org/Bugs/Public/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.

Received on Tuesday, 24 August 2010 18:49:03 UTC