Should request's referrer uses browsing context container’s node document url in Blob url #120

tungnh28 · 2019-05-14T08:03:40Z

That is defined in https://www.w3.org/TR/referrer-policy/#determine-requests-referrer step 3-3
and in the case nested browsing context iframe srcdoc we should use container’s node document uri.
In fact, referrer policy is inherited from the creator browsing context or blob URL not only in srcdoc but other cases like blob URL. Would it be better if we treat referrer in blob URL the same (or others scheme like data url, or javascript: maybe)?

Example:

  <meta name="referrer" content="origin">
  <body
    </script>
        const TEST_DOC =
            `<script>
              .... SOME LOAD HERE
            </` + "script>";

        let iframe = document.createElement("iframe");
        let blob = URL.createObjectURL(new Blob([TEST_DOC], {type: 'text/html'}));
        iframe.src = blob;
        document.body.appendChild(iframe);
      }
    </script>
  </body>

Then every load in the iframe should use referrer policy of creator document (top level) and referrer is that document's uri

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Should request's referrer uses browsing context container’s node document url in Blob url #120

Should request's referrer uses browsing context container’s node document url in Blob url #120

tungnh28 commented May 14, 2019 •

edited by annevk

Loading

Should request's referrer uses browsing context container’s node document url in Blob url #120

Should request's referrer uses browsing context container’s node document url in Blob url #120

Comments

tungnh28 commented May 14, 2019 • edited by annevk Loading

tungnh28 commented May 14, 2019 •

edited by annevk

Loading