[vlc-devel] [PATCH] lua/http: set same-origin referrer policy

[Steve Lhomme]

"no-referrer" seems the safer option IMO

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy

On 2020-08-03 22:02, Pierre Ynard via vlc-devel wrote:
> 
> Subject:
> [vlc-devel] [PATCH] lua/http: set same-origin referrer policy
> From:
> Pierre Ynard <linkfanel at yahoo.fr>
> Date:
> 2020-08-03, 22:02
> To:
> vlc-devel at videolan.org
> 
> To:
> vlc-devel at videolan.org
> 
> 
>> As the built-in web server never uses the Referer, can't we set a
>> policy to never send it at all?
> 
> Sure, that would be no-referrer instead of same-origin.
> 
> Come to think of it, the HTTPd certainly doesn't even pass that header
> to the web interface, so it couldn't possibly be used.
> 
> I don't mind either way; any other opinion about that?
> 
> -- 
> Pierre Ynard
> "Une âme dans un corps, c'est comme un dessin sur une feuille de papier."
> 
> 
> _______________________________________________
> vlc-devel mailing list
> To unsubscribe or modify your subscription options:
> https://mailman.videolan.org/listinfo/vlc-devel
>