W3C home > Mailing lists > Public > public-web-security@w3.org > May 2011

Re: scrub-referrer directive?

From: Devdatta Akhawe <dev.akhawe@gmail.com>
Date: Thu, 26 May 2011 19:09:51 -0700
Message-ID: <BANLkTi=WEmbo0ejovRQc+D13Ruwi-EdHwQ@mail.gmail.com>
To: Adam Barth <w3c@adambarth.com>
Cc: public-web-security@w3.org
>
> 1) Remove header entirely.
> 2) Strip down the Referer to just the origin.
>

2. seems to be the Origin header. Is there a particular use case for
adding this ?

--devdatta

> https://bugs.webkit.org/show_bug.cgi?id=61576
>
> Should we add a "scrub-referrer" directive to CSP?
>
> Adam
>
>
Received on Friday, 27 May 2011 02:10:38 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Friday, 27 May 2011 02:10:39 GMT