Conversation:
Notices
-
@moonman Isn't there an HTTP header to set referrer policy pretty much implemented in all modern browsers: https://www.w3.org/TR/referrer-policy/
cc: @maiyannah
-
@moonman @maiyannah Just copy the HSTS plugin whatever its name was, StrictTransport something, and change which header is sent. Send a merge request too, please.
-
@moonman It's still a draft, there was some added value recently for same-origin or something which for example GNUsocial requires for the API calls.
Hmm, reminds me I have to check whether API GET calls can still be made without a referrer via a third party site's links.