Strict-origin-when-cross-origin Chrome

In Chrome, this policy sends the (origin + path) when requesting the same origin . When cross-origin, it sends only the origin (no path or query parameters). It does not send the Referer header when downgrading from HTTPS to HTTP.

Since (August 2020), strict-origin-when-cross-origin has been the default Referrer-Policy for: strict-origin-when-cross-origin chrome

The strict-origin-when-cross-origin directive is a hybrid policy that alters data transmission based on the destination's relationship to the origin: In Chrome, this policy sends the (origin +

Наверх