[vlc-commits] lua/http: set no-referrer policy

Fri Aug 7 19:26:14 CEST 2020

vlc | branch: master | Pierre Ynard <linkfanel at yahoo.fr> | Fri Aug  7 19:25:10 2020 +0200| [875b573f1779c3428ea746aca870552945b87274] | committer: Pierre Ynard

lua/http: set no-referrer policy

Without this, calls to external resources leak the URL of the web
interface over the internet, which is not necessarily something that the
user wants.

> http://git.videolan.org/gitweb.cgi/vlc.git/?a=commit;h=875b573f1779c3428ea746aca870552945b87274
---

 share/lua/http/index.html            | 1 +
 share/lua/http/mobile.html           | 1 +
 share/lua/http/mobile_browse.html    | 1 +
 share/lua/http/mobile_equalizer.html | 1 +
 share/lua/http/mobile_view.html      | 1 +
 share/lua/http/view.html             | 1 +
 share/lua/http/vlm.html              | 1 +
 7 files changed, 7 insertions(+)

diff --git a/share/lua/http/index.html b/share/lua/http/index.html
index c96d411d95..433094fc6e 100644
--- a/share/lua/http/index.html
+++ b/share/lua/http/index.html
@@ -25,6 +25,7 @@
 	<head>
 		<title><?vlc gettext("VLC media player - Web Interface") ?></title>
 		<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
+		<meta name="referrer" content="no-referrer" />
 		<link href="favicon.ico" type="image/x-icon" rel="shortcut icon" />
 		<script type="text/javascript" src="js/common.js"></script>
 		<script type="text/javascript">
diff --git a/share/lua/http/mobile.html b/share/lua/http/mobile.html
index 31b932f3dc..8b15eee0ae 100644
--- a/share/lua/http/mobile.html
+++ b/share/lua/http/mobile.html
@@ -24,6 +24,7 @@
 	<head>
 		<title><?vlc gettext("VLC media player - Web Interface") ?></title>
 		<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
+		<meta name="referrer" content="no-referrer" />
 		<meta name="viewport" content="initial-scale=1.0" />
 		<meta name="viewport" content="width=device-width" />
 		<meta name="apple-mobile-web-app-status-bar-style" content="default" />
diff --git a/share/lua/http/mobile_browse.html b/share/lua/http/mobile_browse.html
index 82e9997840..e42b94f354 100644
--- a/share/lua/http/mobile_browse.html
+++ b/share/lua/http/mobile_browse.html
@@ -24,6 +24,7 @@
 	<head>
 		<title><?vlc gettext("VLC media player - Web Interface") ?></title>
 		<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
+		<meta name="referrer" content="no-referrer" />
 		<meta name="viewport" content="width=device-width" />
 		<link href="favicon.ico" type="image/x-icon" rel="shortcut icon" />
 		<script type="text/javascript" src="js/common.js"></script>
diff --git a/share/lua/http/mobile_equalizer.html b/share/lua/http/mobile_equalizer.html
index 4406741b65..a1ad53ab72 100644
--- a/share/lua/http/mobile_equalizer.html
+++ b/share/lua/http/mobile_equalizer.html
@@ -24,6 +24,7 @@
 	<head>
 		<title><?vlc gettext("VLC media player - Web Interface") ?></title>
 		<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
+		<meta name="referrer" content="no-referrer" />
 		<meta name="viewport" content="width=device-width; user-scalable=no" />
 		<link href="favicon.ico" type="image/x-icon" rel="shortcut icon" />
 		<script type="text/javascript" src="js/common.js"></script>
diff --git a/share/lua/http/mobile_view.html b/share/lua/http/mobile_view.html
index 69c288682d..2f3f457bc8 100644
--- a/share/lua/http/mobile_view.html
+++ b/share/lua/http/mobile_view.html
@@ -24,6 +24,7 @@
 	<head>
 		<title><?vlc gettext("VLC media player - Web Interface") ?></title>
 		<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
+		<meta name="referrer" content="no-referrer" />
 		<meta name="viewport" content="width=device-width; user-scalable=no" />
 		<link href="favicon.ico" type="image/x-icon" rel="shortcut icon"/>
 		<script type="text/javascript" src="js/common.js"></script>
diff --git a/share/lua/http/view.html b/share/lua/http/view.html
index a155ff7e53..283d0b5169 100644
--- a/share/lua/http/view.html
+++ b/share/lua/http/view.html
@@ -25,6 +25,7 @@
 <head>
 	<title><?vlc gettext("VLC media player - Flash Viewer") ?></title>
 	<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
+	<meta name="referrer" content="no-referrer" />
 	<link href="favicon.ico" type="image/x-icon" rel="shortcut icon"/>
 	<link type="text/css" href="css/ui-lightness/jquery-ui-1.8.13.custom.css" rel="stylesheet" />
 	<link type="text/css" href="css/main.css" rel="stylesheet" />
diff --git a/share/lua/http/vlm.html b/share/lua/http/vlm.html
index b71ed0127e..b7dd252a11 100644
--- a/share/lua/http/vlm.html
+++ b/share/lua/http/vlm.html
@@ -28,6 +28,7 @@
 <head>
   <title>VLC media player - Web Interface - VLM</title>
   <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
+  <meta name="referrer" content="no-referrer" />
   <link href="old/style.css" rel="stylesheet" type="text/css" />
   <script type="text/javascript" src="old/js/functions.js"></script>
   <script type="text/javascript" src="old/js/vlm.js"></script>

