Re: [whatwg/fetch] Referrer policy: Should request's referrer policy be updated in the main fetch? (#266)

The service worker does not get the original referrer. There's three parts in play:

1. The request's referrer (a URL, or a special value "client" or "no-referrer")
2. The request's referrer policy (a policy)
3. The request's client's referrer policy (a policy)

Then you have the two times this request goes through Fetch. The first time the client will be that of the page, the second time it will be that of the service worker.

The first time it goes through Fetch request's referrer will be set to whatever the Referrer Policy specification decides. It is now either the same as it was before, or less, and definitely no longer "client".

This means that the second time this request through Fetch, the Referrer Policy specification only has whatever request's referrer is set to to work with. So it cannot possibly reveal more, only less or the same amount.

And note that if request's referrer is "no-referrer", the Referrer Policy specification isn't even consulted.

---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/266#issuecomment-203889071