Re: [referrer] Providing safer policy states

On Wed, Apr 6, 2016 at 11:43 PM, Anne van Kesteren <annevk@annevk.nl> wrote:

> On Wed, Apr 6, 2016 at 10:26 PM, Emily Stark (Dunn) <estark@google.com>
> wrote:
> > On Tue, Apr 5, 2016 at 11:51 PM, Anne van Kesteren <annevk@annevk.nl>
> wrote:
> >> How would you transition the Fetch API and HTML referrerpolicy
> attribute?
> >
> > Are there specific aspects of this or concerns that you're thinking
> about?
>
> Backwards compatibility, mostly. Not entirely sure what JSON or enum
> would be either for the API.
>
>
> > One idea that had been thrown around is to always have referrer policies
> be
> > quoted strings, so that they always parse as JSON. I'm not sure if that's
> > what you're asking about though.
>
> You mean requiring referrerpolicy=" 'origin' "? What would happen to
> referrerpolicy=origin?
>

I was thinking maybe we could deprecate the latter (continue to support it
for a while, maybe with a console warning, and eventually drop support).
When parsing a referrer policy, we could first check if it matches one of
the enum values, and if not, then parse it as JSON. If it neither matches
an enum value nor parses as JSON, then we just ignore it.


>
>
> --
> https://annevankesteren.nl/
>