W3C home > Mailing lists > Public > public-webapi@w3.org > July 2006

Re: Include Referer-HTTP-header in requests from XMLHttpRequests

From: Nicolas Mendoza <mendoza@pvv.ntnu.no>
Date: Fri, 30 Jun 2006 05:21:00 +0200
To: public-webapi@w3.org
Message-ID: <op.tbxvlaej4q17ch@localhost.localdomain>

On Thu, 29 Jun 2006 23:10:57 +0200, Mark Baker <distobj@acm.org> wrote:

>
> On 6/29/06, Mark Nottingham <mnot@yahoo-inc.com> wrote:
>> See my previous message; the whole point is that Referer is *not*
>> under the control of the author, but instead automatically generated
>> based on the user's context.
>
> I understand, but I don't see it as a large burden to ask that authors  
> do this;
>
>     r.setRequestHeader( "Referer", this.location.href );
>

How about the possibility to rather turn off the sending of some headers?  
For people making web applications with traffic concerns it would be in  
their interest to take extra effort in stripping data, rather than  
opting-in when no traffic concerns?

Anyway, most browsers already allow you to turn off/on referers and users  
get according results when navigating on the net. Don't see why XHRs  
shouldn't be affected by the same user settings?

-- 
Nicolas Mendoza
http://utilitybase.com
Received on Saturday, 1 July 2006 13:46:49 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Tuesday, 8 January 2008 14:18:55 GMT