Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with
or
.
Download ZIP
Commits on May 11, 2015
  1. @mikewest
Commits on May 7, 2015
  1. @kristijanburnik
Commits on Mar 3, 2015
  1. @mikewest
Commits on Feb 15, 2015
  1. @fmarier

    Not all of the possible values make sense at the attribute level

    fmarier authored
    This is inspired by a comment from @briansmith.
  2. @fmarier
  3. @fmarier
  4. @fmarier
Commits on Feb 13, 2015
  1. @fmarier

    Add a new "referrer attribute" delivery mechanism

    fmarier authored
    This delivery mechanism is meant to subsume the rel="noreferrer"
    link type defined in the HTML5 spec:
    
      https://html.spec.whatwg.org/multipage/semantics.html#link-type-noreferrer
    
    This would allow for the following use case:
    
    - I don't want any referrers to be sent (i.e. global policy of
    "no-referrer" delivered via <meta> or CSP)
    - except for these two links that should reveal the origin of the
    referring page (i.e. local policy of "origin" on the two <a> elements)
Commits on Feb 10, 2015
  1. @mikewest
Commits on Feb 7, 2015
  1. @mikewest
  2. @mikewest
Commits on Jan 30, 2015
  1. @jeisinger
Commits on Dec 26, 2014
  1. @mikewest

    REFERRER: s/referer/Referer/g

    mikewest authored
Commits on Dec 3, 2014
  1. @mikewest

    s/w3c.org/w3.org/g

    mikewest authored
Commits on Oct 20, 2014
  1. @mikewest
  2. @mikewest
  3. @mikewest
  4. @mikewest
Commits on Sep 14, 2014
  1. @tomrittervg

    Minor Typos

    tomrittervg authored
Commits on Sep 10, 2014
  1. @mikewest
Commits on Sep 1, 2014
  1. @mikewest
Commits on Aug 19, 2014
  1. @mikewest
  2. @mikewest
Commits on Aug 18, 2014
  1. @mikewest
  2. @mikewest
Commits on Aug 12, 2014
  1. @jeisinger
Commits on Jul 25, 2014
  1. @mikewest
  2. @mikewest
  3. @mikewest

    REFERRER: s/"none"/none/g

    mikewest authored
Commits on Jul 24, 2014
  1. @mikewest

    REFERRER: Requests from unique origins should not generate a referer …

    mikewest authored
    …header.
    
    Hixie noted in [1] that HTML's Fetch algorithm drops the 'referer'
    header when making requests from unique origins. Firefox honors this
    requirement, Chrome currently doesn't. Filed https://crbug.com/397011
    to cover it.
    
    [1]: http://lists.w3.org/Archives/Public/public-webappsec/2014Jul/0101.html
  2. @mikewest

    REFERRER: Clean up the 'determine' algorithm.

    mikewest authored
    Hixie noted that we do a poor job specifying where we get the URL we're
    eventually going to use to generate the referrer[1]. This patch attempts
    to explain the logic in less hand-wavey ways that don't just pull URLs
    out of thin air.
    
    [1]: http://lists.w3.org/Archives/Public/public-webappsec/2014Jul/0101.html
  3. @mikewest
  4. @jeisinger
Commits on Jul 22, 2014
  1. @jeisinger
  2. @jeisinger
Something went wrong with that request. Please try again.