User:Apking/Web Security Guidelines: Difference between revisions

tweaks
(rewording)
(tweaks)
Line 555: Line 555:
Referer: https://example.com/page.html</pre>
Referer: https://example.com/page.html</pre>


In addition to the privacy risks that this entails, the browser may also transmit internal-use-only URLs that it may not have intended to reveal. To limit the exposure of this information, it is recommended that websites use HTTP Referrer Policy to either eliminate the <tt>Referer</tt> header entirely, or reduce the amount of information that it contains.
In addition to the privacy risks that this entails, the browser may also transmit internal-use-only URLs that it may not have intended to reveal. If you as the site operator want to limit the exposure of this information, you can use HTTP Referrer Policy to either eliminate the <tt>Referer</tt> header or reduce the amount of information that it contains.


== Directives ==
== Directives ==
Line 720: Line 720:
! Changes
! Changes
|-
|-
| style="padding-left: .5em; text-align: left;" | October, 2016
| style="padding-left: .5em; text-align: left;" | November, 2016
| align="center" | April
| align="center" | April
| style="padding-left: .5em;" | Added Referrer Policy
| style="padding-left: .5em;" | Added Referrer Policy
Anti-spam team, Confirmed users
99

edits