search

andersju / webbkoll

An online tool that checks how a website is doing with regards to privacy
MIT License
266 stars 28 forks source link

Check for (and recommend) same-origin Referrer Policy #4

Closed andersju closed 6 years ago

andersju commented 7 years ago

We should give a green "Referrers not leaked" result if a site uses the same-origin policy (meaning referrers are not sent when making cross-origin requests), and also recommend it as an alternative to no-referrer once it gets more browser support.

Currently only Firefox (>= 52) appears to support same-origin (see MDN browser compatibility page and the open Chromium bug).