Brave News image requests should omit certain headers

[fmarier]

Every application using our private CDN is asked to remove the following headers from their requests:

• Accept-Language
• Cookie
• DNT
• Referer
• User-Agent

I suspect we already omit the Cookie header when loading images in Brave Today.

[petemill]

These are the current request headers made when we request an item

Looks like we just need to remove

• user-agent
• accept-language

Is that right @fmarier ?

[petemill]

With generating the request via JS fetch, it's not currently possible to customize the user-agent header (even though it should be)..

[fmarier]

Looks like we just need to remove

• user-agent
• accept-language

Yes, those two, and potentially DNT though you'd only see that one if you enabled it in brave://settings/cookies:

[petemill]

Going to re-open this and leave it open since the user-agent and dnt headers are still being transmitted. Unavoidable with the current fetch API in chromium until we can move to C++

[petemill]

@fmarier are you ok with moving this to a p3 since there should not be that many different buckets of users if we're only sending UA and dnt?

[fmarier]

P3 sounds fine. Let's not forget about it, but it doesn't need to be urgently fixed given we're not leaking very much info anymore.

[mattmcalister]

@petemill is this addressable now? I'd like to close out old issues, if possible.