W3C home > Mailing lists > Public > public-webappsec@w3.org > October 2015

Re: Move `referrer` from CSP to some other header.

From: Anne van Kesteren <annevk@annevk.nl>
Date: Sat, 10 Oct 2015 10:16:03 +0200
Message-ID: <CADnb78grsnefkO=VW-FoP1F73SVEh4fZN2HMXawY48-SuU1m=g@mail.gmail.com>
To: Mike West <mkwst@google.com>
Cc: "public-webappsec@w3.org" <public-webappsec@w3.org>, Brian Smith <brian@briansmith.org>, Jochen Eisinger <eisinger@google.com>, Brad Hill <hillbrad@gmail.com>, Dan Veditz <dveditz@mozilla.com>
On Fri, Oct 9, 2015 at 3:45 PM, Mike West <mkwst@google.com> wrote:
> To that end, I would suggest that we drop the `referrer` directive
> from the referrer policy spec, and turn it into a distinct header (how
> about `referrer: [type]` (or, `referer: origin` in the interests of
> historical amusement, and potentially turning on that exciting header
> compression that HTTP/2 folks go on about)).

Was it not implemented?

Received on Saturday, 10 October 2015 08:16:28 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:54:52 UTC