[vlc-commits] lua/http: set no-referrer policy

Fri Aug 7 19:32:53 CEST 2020

vlc/vlc-3.0 | branch: master | Pierre Ynard <linkfanel at yahoo.fr> | Fri Aug  7 19:25:10 2020 +0200| [2e83d1e59f850f0fa423591de9fb86e3bdd1b4af] | committer: Pierre Ynard

lua/http: set no-referrer policy

Without this, calls to external resources leak the URL of the web
interface over the internet, which is not necessarily something that the
user wants.

(cherry picked from commit 875b573f1779c3428ea746aca870552945b87274)
Signed-off-by: Pierre Ynard <linkfanel at yahoo.fr>

> http://git.videolan.org/gitweb.cgi/vlc/vlc-3.0.git/?a=commit;h=2e83d1e59f850f0fa423591de9fb86e3bdd1b4af
---

 share/lua/http/index.html            | 1 +
 share/lua/http/mobile.html           | 1 +
 share/lua/http/mobile_browse.html    | 1 +
 share/lua/http/mobile_equalizer.html | 1 +
 share/lua/http/mobile_view.html      | 1 +
 share/lua/http/view.html             | 1 +
 share/lua/http/vlm.html              | 1 +
 7 files changed, 7 insertions(+)

diff --git a/share/lua/http/index.html b/share/lua/http/index.html
index c96d411d95..433094fc6e 100644
--- a/share/lua/http/index.html
+++ b/share/lua/http/index.html
@@ -25,6 +25,7 @@
 	<head>
 		<title><?vlc gettext("VLC media player - Web Interface") ?></title>
 		<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
+		<meta name="referrer" content="no-referrer" />
 		<link href="favicon.ico" type="image/x-icon" rel="shortcut icon" />
 		<script type="text/javascript" src="js/common.js"></script>
 		<script type="text/javascript">
diff --git a/share/lua/http/mobile.html b/share/lua/http/mobile.html
index ab5deb2ddd..69172660ad 100644
--- a/share/lua/http/mobile.html
+++ b/share/lua/http/mobile.html
@@ -24,6 +24,7 @@
 	<head>
 		<title>VLC media player - Web Interface</title>
 		<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
+		<meta name="referrer" content="no-referrer" />
 		<meta name="viewport" content="initial-scale=1.0" />
 		<meta name="viewport" content="width=device-width" />
 		<meta name="apple-mobile-web-app-status-bar-style" content="default" />
diff --git a/share/lua/http/mobile_browse.html b/share/lua/http/mobile_browse.html
index 82e9997840..e42b94f354 100644
--- a/share/lua/http/mobile_browse.html
+++ b/share/lua/http/mobile_browse.html
@@ -24,6 +24,7 @@
 	<head>
 		<title><?vlc gettext("VLC media player - Web Interface") ?></title>
 		<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
+		<meta name="referrer" content="no-referrer" />
 		<meta name="viewport" content="width=device-width" />
 		<link href="favicon.ico" type="image/x-icon" rel="shortcut icon" />
 		<script type="text/javascript" src="js/common.js"></script>
diff --git a/share/lua/http/mobile_equalizer.html b/share/lua/http/mobile_equalizer.html
index 4406741b65..a1ad53ab72 100644
--- a/share/lua/http/mobile_equalizer.html
+++ b/share/lua/http/mobile_equalizer.html
@@ -24,6 +24,7 @@
 	<head>
 		<title><?vlc gettext("VLC media player - Web Interface") ?></title>
 		<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
+		<meta name="referrer" content="no-referrer" />
 		<meta name="viewport" content="width=device-width; user-scalable=no" />
 		<link href="favicon.ico" type="image/x-icon" rel="shortcut icon" />
 		<script type="text/javascript" src="js/common.js"></script>
diff --git a/share/lua/http/mobile_view.html b/share/lua/http/mobile_view.html
index 69c288682d..2f3f457bc8 100644
--- a/share/lua/http/mobile_view.html
+++ b/share/lua/http/mobile_view.html
@@ -24,6 +24,7 @@
 	<head>
 		<title><?vlc gettext("VLC media player - Web Interface") ?></title>
 		<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
+		<meta name="referrer" content="no-referrer" />
 		<meta name="viewport" content="width=device-width; user-scalable=no" />
 		<link href="favicon.ico" type="image/x-icon" rel="shortcut icon"/>
 		<script type="text/javascript" src="js/common.js"></script>
diff --git a/share/lua/http/view.html b/share/lua/http/view.html
index a155ff7e53..283d0b5169 100644
--- a/share/lua/http/view.html
+++ b/share/lua/http/view.html
@@ -25,6 +25,7 @@
 <head>
 	<title><?vlc gettext("VLC media player - Flash Viewer") ?></title>
 	<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
+	<meta name="referrer" content="no-referrer" />
 	<link href="favicon.ico" type="image/x-icon" rel="shortcut icon"/>
 	<link type="text/css" href="css/ui-lightness/jquery-ui-1.8.13.custom.css" rel="stylesheet" />
 	<link type="text/css" href="css/main.css" rel="stylesheet" />
diff --git a/share/lua/http/vlm.html b/share/lua/http/vlm.html
index b71ed0127e..b7dd252a11 100644
--- a/share/lua/http/vlm.html
+++ b/share/lua/http/vlm.html
@@ -28,6 +28,7 @@
 <head>
   <title>VLC media player - Web Interface - VLM</title>
   <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
+  <meta name="referrer" content="no-referrer" />
   <link href="old/style.css" rel="stylesheet" type="text/css" />
   <script type="text/javascript" src="old/js/functions.js"></script>
   <script type="text/javascript" src="old/js/vlm.js"></script>

