[vlc-devel] [PATCH] lua/http: set same-origin referrer policy

Pierre Ynard linkfanel at yahoo.fr
Mon Aug 3 22:02:52 CEST 2020


> As the built-in web server never uses the Referer, can't we set a
> policy to never send it at all?

Sure, that would be no-referrer instead of same-origin.

Come to think of it, the HTTPd certainly doesn't even pass that header
to the web interface, so it couldn't possibly be used.

I don't mind either way; any other opinion about that?

-- 
Pierre Ynard
"Une âme dans un corps, c'est comme un dessin sur une feuille de papier."


More information about the vlc-devel mailing list