Network.http.sendSecureXSiteReferrer

From MozillaZine Knowledge Base

The title given to this article is incorrect due to technical limitations. The correct title is network.http.sendSecureXSiteReferrer.

This article describes the preference network.http.sendSecureXSiteReferrer. To add, delete, or modify this preference, you will need to edit your configuration — do not edit this article.

1 Background
2 Possible values and their effects
- 2.1 true
- 2.2 false
3 Caveats
4 Recommended settings
5 First checked in
6 Has an effect in
7 Related bugs
8 Related preferences

[edit]

Background

HTTP is the application-layer protocol that most web pages are transferred with. As part of HTTP, requests can include a "Referer" (sic) header that tells the server which page the user was on that initiated the request. Servers use this information to track users' paths through the site and possibly provide additional features. The HTTP spec specifies that going from a secure (https) server to a non-secure (http) server should not result in a Referer header being sent, but does not define whether a Referer should be sent between two secure sites. This preferences controls that option.

[edit]

Possible values and their effects

[edit]

true

Send the Referer header when navigating from a https site to another https site. (Default)

[edit]

false

Don't send the Referer header when navigating from a https site to another https site.

[edit]

Caveats

network.http.sendRefererHeader must be set to 1 or 2 for this preference to have an effect.

[edit]

Recommended settings

Those concerned with privacy can set this to false, realizing that this may adversely affect some sites. Those wanting to ensure compatibility should leave it at the default.

[edit]