Untitled attachment

Notices where this attachment appears

1. Bernie (codewiz@mstdn.io)'s status on Sunday, 30-Jan-2022 22:04:45 UTC Bernie

   in reply to

   @piggo @jayrope Oh, didn't think about that! But there have been mitigations for several years:
   https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy

   Modern user agents default to strict-origin-when-cross-origin, which essentially means sending only the origin's hostname with no path when querying third-party domains.

   Sites requesting resources from third-party domains should set "Referrer-Policy: no-referrer" to prevent them from correlating the user's IP to all the domains they visit.