From 693540415a308c347897eff3b540b5716c52e366 Mon Sep 17 00:00:00 2001 From: Thilak <64648639+Thilak-KN@users.noreply.github.com> Date: Mon, 30 Sep 2024 10:27:14 +0530 Subject: [PATCH] improve the example for no-referrer-when-downgrade policy (#35997) docs(referrer-policy): improve the example of no-referrer-when-downgrade referrer-policy https://w3c.github.io/webappsec-referrer-policy/#referrer-policy-no-referrer-when-downgrade the specification allows Referer header to be added when the referrer-URL is a non-potentially trustworthy URL, regardless of the potential trustworthiness of referred-URL Co-authored-by: Thilak <64648639+shitt-show@users.noreply.github.com> --- files/en-us/web/http/headers/referrer-policy/index.md | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/files/en-us/web/http/headers/referrer-policy/index.md b/files/en-us/web/http/headers/referrer-policy/index.md index e76024a33395c47..d1446d68a99b16c 100644 --- a/files/en-us/web/http/headers/referrer-policy/index.md +++ b/files/en-us/web/http/headers/referrer-policy/index.md @@ -107,11 +107,12 @@ CSS can fetch resources referenced from stylesheets. These resources follow a re ### `no-referrer-when-downgrade` -| From document | Navigation to | Referrer used | -| -------------------------- | ------------------------------- | -------------------------- | -| `https://example.com/page` | `https://example.com/otherpage` | `https://example.com/page` | -| `https://example.com/page` | `https://mozilla.org` | `https://example.com/page` | -| `https://example.com/page` | **http**://example.com | _(no referrer)_ | +| From document | Navigation to | Referrer used | +| --------------------------- | ------------------------------- | -------------------------- | +| `https://example.com/page` | `https://example.com/otherpage` | `https://example.com/page` | +| `https://example.com/page` | `https://mozilla.org` | `https://example.com/page` | +| `https://example.com/page` | **http**://example.com | _(no referrer)_ | +| **http**://example.com/page | _anywhere_ | `http://example.com/page` | ### `origin`