W3C home > Mailing lists > Public > public-webappsec@w3.org > September 2015

Re: Referrer value for resources fetched from CSS

From: Boris Zbarsky <bzbarsky@mit.edu>
Date: Wed, 30 Sep 2015 13:14:16 -0400
To: Jochen Eisinger <eisinger@google.com>, Anne van Kesteren <annevk@annevk.nl>
Cc: Tanvi Vyas <tanvi@mozilla.com>, Mike West <mkwst@google.com>, Yoav Weiss <yoav@yoav.ws>, "public-webappsec@w3.org" <public-webappsec@w3.org>
Message-ID: <560C1868.6090504@mit.edu>
On 9/30/15 11:42 AM, Jochen Eisinger wrote:
> next question. If a document has a meta referrer tag, then includes a
> stylesheet, and then later some script modifies the referrer policy, and
> then starts using some font.

This is why a mutable <meta referrer> is a bad idea.

How is this different from the case of an <img> created after the 
referrer policy changed?

Received on Wednesday, 30 September 2015 17:14:47 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 18:54:52 UTC