Subject: bug#27012: 26.0.50; eww does not generate Referer headers

From: Lars Ingebrigtsen <[email-masked]>
Date: Mon, 22 May 2017 18:53:42 +0200

Glenn Morris <[email-masked]> writes:

> You could look at how GNU Icecat handles this, eg
> network.http.referer.spoofSource. (I would guess every privacy issue eww
> might encounter has already been considered by Icecat.)

network.http.referer.XOriginPolicy

    0 - always send referrer (default).
    1 - only send if base domains match.
    2 - only send if hosts match.

Adding something like this (and defaulting to 1) might make sense for
eww.

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no