Is HTTP header Referer sent when going to a http page from a https page?

后端 未结 4 1768
佛祖请我去吃肉
佛祖请我去吃肉 2020-11-29 22:47

After a few tests, I\'m starting to reach the conclusion that a browser does not send a Referer HTTP header when one clicks to a http page from a https one.

What sec

4条回答
  •  野趣味
    野趣味 (楼主)
    2020-11-29 23:33

    The HTTP RFC states, in section 15.1.3 Encoding Sensitive Information in URI's :

    Clients SHOULD NOT include a Referer header field in a (non-secure) HTTP request if the referring page was transferred with a secure protocol.

    So, this is expected / standard behaviour.

提交回复
热议问题