Re: [whatwg/fetch] Referrer policy: Should request's referrer policy be updated in the main fetch? (#266)

I think now I understand. I misunderstood "more" and "less" in your comments. I used them as more / less compared to the existing behavior, but you used them as more / less compared to the referrer string which is the result of the (first) referrer calculation, right?

Let me confirm one thing: If redirect is involved, I think it's possible that the HTTP "referer" header reveals more information than when the redirect were processed in the main page (the last two rows in the table). In other words, even if you're sure that the page's referrer policy is default and you don't give a referrer policy attribute to an \<img\> element, a redirected request originated from the element to a downgraded URL might reveal the referrer. Is that correct?


---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/266#issuecomment-203903757