Permalink
Browse files

[giow] (2) Require Referer: to be omitted for data: URLs and sandboxe…

…d iframes.

Fixing http://www.w3.org/Bugs/Public/show_bug.cgi?id=8869

git-svn-id: http://svn.whatwg.org/webapps@4727 340c8d12-0b0e-0410-8428-c7bf67bfef74
  • Loading branch information...
Hixie committed Feb 14, 2010
1 parent 8541d5f commit 5f02aadef103e632fff6977e2611f0875613d24e
Showing with 15 additions and 0 deletions.
  1. +5 −0 complete.html
  2. +5 −0 index
  3. +5 −0 source
View
@@ -5230,6 +5230,11 @@ <h3 id=fetching-resources><span class=secno>2.6 </span>Fetching resources</h3>
Request-URIs are obtained</i>.</p> <!-- RFC2616 says "The URI MUST
NOT include a fragment." (section 14.36) -->
+ <p>If the <a href=#origin>origin</a> of the appropriate
+ <code>Document</code> is not a scheme/host/port tuple, then the
+ <code title=http-referer>Referer</code> (sic) header must be
+ omitted, regardless of its value.</p>
+
</li>
<li><p>Perform the remaining steps asynchronously.</li>
View
5 index
@@ -5129,6 +5129,11 @@ a.setAttribute('href', 'http://example.com/'); // change the content attribute d
Request-URIs are obtained</i>.</p> <!-- RFC2616 says "The URI MUST
NOT include a fragment." (section 14.36) -->
+ <p>If the <a href=#origin>origin</a> of the appropriate
+ <code>Document</code> is not a scheme/host/port tuple, then the
+ <code title=http-referer>Referer</code> (sic) header must be
+ omitted, regardless of its value.</p>
+
</li>
<li><p>Perform the remaining steps asynchronously.</li>
View
5 source
@@ -4753,6 +4753,11 @@ a.setAttribute('href', 'http://example.com/'); // change the content attribute d
Request-URIs are obtained</i>.</p> <!-- RFC2616 says "The URI MUST
NOT include a fragment." (section 14.36) -->
+ <p>If the <span>origin</span> of the appropriate
+ <code>Document</code> is not a scheme/host/port tuple, then the
+ <code title="http-referer">Referer</code> (sic) header must be
+ omitted, regardless of its value.</p>
+
</li>
<li><p>Perform the remaining steps asynchronously.</p></li>

0 comments on commit 5f02aad

Please sign in to comment.