From 59e8c71af566ce47640a7eae476bd9ea3bd9bad3 Mon Sep 17 00:00:00 2001 From: Francois Marier Date: Fri, 29 Jul 2016 16:29:02 -0700 Subject: [PATCH] Referrer policies: add the missing policies (fixes #342) The following policy states were recently added to the Referrer Policy specification: * same-origin * strict-origin * strict-origin-when-cross-origin They were originally added in https://github.com/w3c/webappsec-referrer-policy/pull/19 and https://github.com/w3c/webappsec-referrer-policy/pull/56, and discussed on the W3C WebAppSec list at https://lists.w3.org/Archives/Public/public-webappsec/2016Mar/0085.html. --- Overview.src.html | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/Overview.src.html b/Overview.src.html index 0cfeb4f6e..634944177 100644 --- a/Overview.src.html +++ b/Overview.src.html @@ -1475,15 +1475,19 @@

no-referrer", "no-referrer-when-downgrade", "origin", -"origin-when-cross-origin", or "unsafe-url". +"no-referrer", "no-referrer-when-downgrade", "same-origin", +"origin", "strict-origin", "origin-when-cross-origin", +"strict-origin-when-cross-origin", or "unsafe-url".
enum ReferrerPolicy {
   "",
   "no-referrer",
   "no-referrer-when-downgrade",
+  "same-origin",
   "origin",
+  "strict-origin",
   "origin-when-cross-origin",
+  "strict-origin-when-cross-origin",
   "unsafe-url"
 };
@@ -5437,6 +5441,7 @@

Acknowledgments

Ehsan Akhgari, Emily Stark, Eric Lawrence, +François Marier, Frank Ellerman, Frederick Hirsch, Gavin Carothers,