- From: Nicolas Mendoza <mendoza@pvv.ntnu.no>
- Date: Fri, 30 Jun 2006 05:21:00 +0200
- To: public-webapi@w3.org
On Thu, 29 Jun 2006 23:10:57 +0200, Mark Baker <distobj@acm.org> wrote: > > On 6/29/06, Mark Nottingham <mnot@yahoo-inc.com> wrote: >> See my previous message; the whole point is that Referer is *not* >> under the control of the author, but instead automatically generated >> based on the user's context. > > I understand, but I don't see it as a large burden to ask that authors > do this; > > r.setRequestHeader( "Referer", this.location.href ); > How about the possibility to rather turn off the sending of some headers? For people making web applications with traffic concerns it would be in their interest to take extra effort in stripping data, rather than opting-in when no traffic concerns? Anyway, most browsers already allow you to turn off/on referers and users get according results when navigating on the net. Don't see why XHRs shouldn't be affected by the same user settings? -- Nicolas Mendoza http://utilitybase.com
Received on Saturday, 1 July 2006 13:46:49 UTC