W3C home > Mailing lists > Public > public-html-bugzilla@w3.org > August 2010

[Bug 9603] If the origin parameter does not match the Document origin the Referer header should also be excluded. Alternatively a way to omit the Referer header would be good for CORS.

From: <bugzilla@jessica.w3.org>
Date: Tue, 24 Aug 2010 18:49:02 +0000
To: public-html-bugzilla@w3.org
Message-Id: <E1OnyYQ-0005VT-1H@jessica.w3.org> 
http://www.w3.org/Bugs/Public/show_bug.cgi?id=9603





--- Comment #1 from Ian 'Hixie' Hickson <ian@hixie.ch>  2010-08-24 18:49:01 ---
To omit the Referer header, you just have to say that the Referer header isn't
sent. (See for instance the "noreferrer" link type, which does this.) There's
not much more I can do in HTML5, since HTTP doesn't provide suitable hooks
here.

-- 
Configure bugmail: http://www.w3.org/Bugs/Public/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
Received on Tuesday, 24 August 2010 18:49:03 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 20:01:21 UTC