W3C home > Mailing lists > Public > public-webappsec@w3.org > September 2015

Re: Referrer value for resources fetched from CSS

From: Jochen Eisinger <eisinger@google.com>
Date: Wed, 30 Sep 2015 17:56:39 +0000
Message-ID: <CALjhuieaCgzsqyaxSB_RJJ=FsoXqOcab3t3PceNdeodOT1WyeQ@mail.gmail.com>
To: Boris Zbarsky <bzbarsky@mit.edu>, Anne van Kesteren <annevk@annevk.nl>
Cc: Tanvi Vyas <tanvi@mozilla.com>, Mike West <mkwst@google.com>, Yoav Weiss <yoav@yoav.ws>, "public-webappsec@w3.org" <public-webappsec@w3.org>
An <img> doesn't suddenly load more resources.

Also, the actual referrer url of the CSS doc doesn't change either if you
use history.pushState

On Wed, Sep 30, 2015, 7:14 PM Boris Zbarsky <bzbarsky@mit.edu> wrote:

> On 9/30/15 11:42 AM, Jochen Eisinger wrote:
> > next question. If a document has a meta referrer tag, then includes a
> > stylesheet, and then later some script modifies the referrer policy, and
> > then starts using some font.
>
> This is why a mutable <meta referrer> is a bad idea.
>
> How is this different from the case of an <img> created after the
> referrer policy changed?
>
> -Boris
>
Received on Wednesday, 30 September 2015 17:57:18 UTC

This archive was generated by hypermail 2.3.1 : Monday, 23 October 2017 14:54:15 UTC