Re: [whatwg/fetch] Referrer policy: Should request's referrer policy be updated in the main fetch? (#266)

You are correct. I used more/less in reference to how request's referrer is modified along the way.

A cross-origin redirect somewhere could indeed be problematic for the main page since it can only affect the initial request's referrer, so if it was not restrictive there (e.g., because for same-origin the full URL is fine) that might lead to the service worker revealing more than the main page had intended. But then if the service worker and the main page don't cooperate you have a whole lot of other issues too.

---
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/266#issuecomment-203904744

Received on Thursday, 31 March 2016 12:20:45 UTC