Skip to content

Commit

Permalink
REFERRER: Fetch will use 'no referrer' as well.
Browse files Browse the repository at this point in the history
  • Loading branch information
mikewest committed Aug 19, 2014
1 parent b48b635 commit 1596da3
Show file tree
Hide file tree
Showing 2 changed files with 30 additions and 28 deletions.
31 changes: 16 additions & 15 deletions specs/referrer-policy/index.html
Original file line number Diff line number Diff line change
Expand Up @@ -142,8 +142,8 @@ <h2 class="no-num no-toc no-ref heading settled" id=contents><span class=content
<li><a href=#terms-defined-by-reference><span class=secno>2.2</span> Terms defined by reference</a></ul>
<li><a href=#referrer-policy-states><span class=secno>3</span> Referrer Policy States</a>
<ul class=toc>
<li><a href=#referrer-policy-state-none><span class=secno>3.1</span> No Referrer</a>
<li><a href=#referrer-policy-state-none-when-downgrade><span class=secno>3.2</span> No Referrer When Downgrade</a>
<li><a href=#referrer-policy-state-no-referrer><span class=secno>3.1</span> No Referrer</a>
<li><a href=#referrer-policy-state-no-referrer-when-downgrade><span class=secno>3.2</span> No Referrer When Downgrade</a>
<li><a href=#referrer-policy-state-origin><span class=secno>3.3</span> Origin Only</a>
<li><a href=#referrer-policy-state-origin-when-cross-origin><span class=secno>3.4</span> Origin When Cross-Origin</a>
<li><a href=#referrer-policy-state-unsafe-url><span class=secno>3.5</span> Unsafe URL</a></ul>
Expand Down Expand Up @@ -377,7 +377,7 @@ <h2 class="heading settled" data-level=3 id=referrer-policy-states><span class=s
baseline policy for requests. This policy may be tightened for specific
requests via mechanisms like the <code><a data-link-type=dfn href=http://www.w3.org/html/wg/drafts/html/CR/links.html#rel-noreferrer title=noreferrer>noreferrer</a></code> link type.</p>

<h3 class="heading settled" data-level=3.1 id=referrer-policy-state-none><span class=secno>3.1 </span><span class=content>No Referrer</span><a class=self-link href=#referrer-policy-state-none></a></h3>
<h3 class="heading settled" data-level=3.1 id=referrer-policy-state-no-referrer><span class=secno>3.1 </span><span class=content>No Referrer</span><a class=self-link href=#referrer-policy-state-no-referrer></a></h3>

<p>The simplest policy is <dfn data-dfn-type=dfn data-noexport="" id=no-referrer>No Referrer<a class=self-link href=#no-referrer></a></dfn>, which specifies that no
referrer information is to be sent along with requests made from a particular
Expand All @@ -391,7 +391,7 @@ <h3 class="heading settled" data-level=3.1 id=referrer-policy-state-none><span c
<a data-link-type=dfn href=#referer-http-header-field title="referer header"><code>referer</code> header</a>.
</div>

<h3 class="heading settled" data-level=3.2 id=referrer-policy-state-none-when-downgrade><span class=secno>3.2 </span><span class=content>No Referrer When Downgrade</span><a class=self-link href=#referrer-policy-state-none-when-downgrade></a></h3>
<h3 class="heading settled" data-level=3.2 id=referrer-policy-state-no-referrer-when-downgrade><span class=secno>3.2 </span><span class=content>No Referrer When Downgrade</span><a class=self-link href=#referrer-policy-state-no-referrer-when-downgrade></a></h3>

<p>The <dfn data-dfn-type=dfn data-noexport="" id=no-referrer-when-downgrade>No Referrer When Downgrade<a class=self-link href=#no-referrer-when-downgrade></a></dfn> policy sends a full URL along with
requests from <a data-link-type=dfn href=#tls-protected title=TLS-protected>TLS-protected</a> <a data-link-type=dfn href=#javascript-global-environment title="global environments">global environments</a> to a
Expand Down Expand Up @@ -587,7 +587,7 @@ <h3 class="heading settled" data-level=4.1 id=referrer-policy-delivery-meta><spa
<dd><code><a data-link-type=dfn href=#origin-only title="Origin Only">Origin Only</a></code></dd>

<dt>default</dt>
<dt>none-when-downgrade</dt>
<dt>no-referrer-when-downgrade</dt>
<dd><code><a data-link-type=dfn href=#no-referrer-when-downgrade title="No Referrer When Downgrade">No Referrer When Downgrade</a></code></dd>

<dt>origin-when-crossorigin</dt>
Expand All @@ -610,8 +610,9 @@ <h3 class="heading settled" data-level=4.1 id=referrer-policy-delivery-meta><spa

<p class=note>Note: Authors are encouraged to avoid the legacy keywords
<code>never</code>, <code>default</code>, and <code>always</code>. The
keywords <code>none</code>, <code>none-when-downgrade</code>, and
<code>unsafe-url</code> respectively are preferred.</p>
keywords <code>no-referrer</code>,
<code>no-referrer-when-downgrade</code>, and <code>unsafe-url</code>
respectively are preferred.</p>

<p class=note>Note: Implementors are advised to also respect a <a data-link-type=dfn href=#referrer-policy title="referrer policy">referrer policy</a>
delivered via a <code><a data-link-type=element href=http://www.w3.org/html/wg/drafts/html/CR/document-metadata.html#meta title=meta>meta</a></code> element during
Expand Down Expand Up @@ -743,12 +744,12 @@ <h3 class="heading settled" data-level=6.2 id=determine-requests-referrer><span
<p>Given a <a data-link-type=dfn href=#request title=Request>Request</a> <var>request</var>, we can determine the correct
referrer information to send by examining the <a data-link-type=dfn href=#referrer-policy title=policy>policy</a> associated with
its <code>client</code>’s <a data-link-type=dfn href=#javascript-global-environment title="global environment">global environment</a>, as detailed in the
following steps, which returns either <code>none</code> or a URL:</p>
following steps, which returns either <code>no referrer</code> or a URL:</p>

<p class=note>Note: If Fetch is performing a navigation in response to a link of type
<code><a data-link-type=dfn href=http://www.w3.org/html/wg/drafts/html/CR/links.html#rel-noreferrer title=noreferrer>noreferrer</a></code>, then <var>request</var>’s
<code>referrer</code> will be <code>none</code>, and Fetch won’t call into
this algorithm.</p>
<code>referrer</code> will be <code>no referrer</code>, and Fetch won’t call
into this algorithm.</p>

<ol>
<li>
Expand Down Expand Up @@ -797,7 +798,7 @@ <h3 class="heading settled" data-level=6.2 id=determine-requests-referrer><span
<li>
If <var>document</var>’s <a data-link-type=dfn href=#origin title=origin>origin</a> is not a scheme/host/port
tuple (because, for example, it has been sandboxed into a unique
origin), return <code>none</code> and abort these steps.
origin), return <code>no referrer</code> and abort these steps.
</li>
<li>
While <var>document</var> corresponds to <a data-link-type=dfn href=http://www.w3.org/html/wg/drafts/html/CR/embedded-content-0.html#an-iframe-srcdoc-document title="an iframe srcdoc Document">an iframe srcdoc Document</a>,
Expand Down Expand Up @@ -827,7 +828,7 @@ <h3 class="heading settled" data-level=6.2 id=determine-requests-referrer><span

<dl>
<dt><var>policy</var> is <code><a data-link-type=dfn href=#no-referrer title="No Referrer">No Referrer</a></code></dt>
<dd>Return <code>none</code></dd>
<dd>Return <code>no referrer</code></dd>

<dt><var>policy</var> is <code><a data-link-type=dfn href=#origin-only title="Origin Only">Origin Only</a></code></dt>
<dd>Return <var>referrerOrigin</var></dd>
Expand Down Expand Up @@ -862,7 +863,7 @@ <h3 class="heading settled" data-level=6.2 id=determine-requests-referrer><span
If <var>environment</var> is <a data-link-type=dfn href=#tls-protected title=TLS-protected>TLS-protected</a> <em>and</em> the
<a data-link-type=dfn href=#origin title=origin>origin</a> of <var>request</var>’s <code>URL</code> is
an <a data-link-type=dfn href=#a-priori-insecure-origin title="a priori insecure origin"><em>a priori</em> insecure origin</a>, then return
<code>none</code>.
<code>no referrer</code>.
</li>
<li>
Otherwise, return <var>requestURL</var>.
Expand Down Expand Up @@ -893,11 +894,11 @@ <h3 class="heading settled" data-level=6.3 id=strip-url><span class=secno>6.3 </

<ol>
<li>
If <var>url</var> is <code>null</code>, return <code>none</code>.
If <var>url</var> is <code>null</code>, return <code>no referrer</code>.
</li>
<li>
If <var>url</var>’s <code>scheme</code> is <em>not</em> a <a data-link-type=dfn href=#relative-scheme title="relative scheme">relative
scheme</a>, then return <code>none</code>.
scheme</a>, then return <code>no referrer</code>.
</li>
<li>
Set <var>url</var>’s <code>username</code> to the empty string.
Expand Down
27 changes: 14 additions & 13 deletions specs/referrer-policy/index.src.html
Original file line number Diff line number Diff line change
Expand Up @@ -231,7 +231,7 @@ <h2 id="referrer-policy-states">Referrer Policy States</h2>
baseline policy for requests. This policy may be tightened for specific
requests via mechanisms like the <code><a>noreferrer</a></code> link type.

<h3 id="referrer-policy-state-none">No Referrer</h3>
<h3 id="referrer-policy-state-no-referrer">No Referrer</h3>

The simplest policy is <dfn>No Referrer</dfn>, which specifies that no
referrer information is to be sent along with requests made from a particular
Expand All @@ -245,7 +245,7 @@ <h3 id="referrer-policy-state-none">No Referrer</h3>
<a><code>referer</code> header</a>.
</div>

<h3 id="referrer-policy-state-none-when-downgrade">No Referrer When Downgrade</h3>
<h3 id="referrer-policy-state-no-referrer-when-downgrade">No Referrer When Downgrade</h3>

The <dfn>No Referrer When Downgrade</dfn> policy sends a full URL along with
requests from <a>TLS-protected</a> <a>global environments</a> to a
Expand Down Expand Up @@ -442,7 +442,7 @@ <h3 id="referrer-policy-delivery-meta">Delivery via <a element>meta</a></h3>
<dd><code><a>Origin Only</a></code></dd>

<dt>default</dt>
<dt>none-when-downgrade</dt>
<dt>no-referrer-when-downgrade</dt>
<dd><code><a>No Referrer When Downgrade</a></code></dd>

<dt>origin-when-crossorigin</dt>
Expand All @@ -463,8 +463,9 @@ <h3 id="referrer-policy-delivery-meta">Delivery via <a element>meta</a></h3>

Note: Authors are encouraged to avoid the legacy keywords
<code>never</code>, <code>default</code>, and <code>always</code>. The
keywords <code>none</code>, <code>none-when-downgrade</code>, and
<code>unsafe-url</code> respectively are preferred.
keywords <code>no-referrer</code>,
<code>no-referrer-when-downgrade</code>, and <code>unsafe-url</code>
respectively are preferred.

Note: Implementors are advised to also respect a <a>referrer policy</a>
delivered via a <code><a element>meta</a></code> element during
Expand Down Expand Up @@ -592,12 +593,12 @@ <h3 id="determine-requests-referrer">
Given a <a>Request</a> <var>request</var>, we can determine the correct
referrer information to send by examining the <a>policy</a> associated with
its <code>client</code>'s <a>global environment</a>, as detailed in the
following steps, which returns either <code>none</code> or a URL:
following steps, which returns either <code>no referrer</code> or a URL:

Note: If Fetch is performing a navigation in response to a link of type
<code><a>noreferrer</a></code>, then <var>request</var>'s
<code>referrer</code> will be <code>none</code>, and Fetch won't call into
this algorithm.
<code>referrer</code> will be <code>no referrer</code>, and Fetch won't call
into this algorithm.

<ol>
<li>
Expand Down Expand Up @@ -646,7 +647,7 @@ <h3 id="determine-requests-referrer">
<li>
If <var>document</var>'s <a>origin</a> is not a scheme/host/port
tuple (because, for example, it has been sandboxed into a unique
origin), return <code>none</code> and abort these steps.
origin), return <code>no referrer</code> and abort these steps.
</li>
<li>
While <var>document</var> corresponds to <a>an iframe srcdoc Document</a>,
Expand Down Expand Up @@ -676,7 +677,7 @@ <h3 id="determine-requests-referrer">

<dl>
<dt><var>policy</var> is <code><a>No Referrer</a></code></dt>
<dd>Return <code>none</code></dd>
<dd>Return <code>no referrer</code></dd>

<dt><var>policy</var> is <code><a>Origin Only</a></code></dt>
<dd>Return <var>referrerOrigin</var></dd>
Expand Down Expand Up @@ -711,7 +712,7 @@ <h3 id="determine-requests-referrer">
If <var>environment</var> is <a>TLS-protected</a> <em>and</em> the
<a>origin</a> of <var>request</var>'s <code>URL</code> is
an <a><em>a priori</em> insecure origin</a>, then return
<code>none</code>.
<code>no referrer</code>.
</li>
<li>
Otherwise, return <var>requestURL</var>.
Expand Down Expand Up @@ -742,11 +743,11 @@ <h3 id="strip-url">

<ol>
<li>
If <var>url</var> is <code>null</code>, return <code>none</code>.
If <var>url</var> is <code>null</code>, return <code>no referrer</code>.
</li>
<li>
If <var>url</var>'s <code>scheme</code> is <em>not</em> a <a>relative
scheme</a>, then return <code>none</code>.
scheme</a>, then return <code>no referrer</code>.
</li>
<li>
Set <var>url</var>'s <code>username</code> to the empty string.
Expand Down

0 comments on commit 1596da3

Please sign in to comment.