refStr = imgElt.referrerPolicy; imgElt.referrerPolicy = refStr;
"no-referrer"meaning that the
Referer:HTTP header will not be sent.
"origin"meaning that the referrer will be the origin of the page, that is roughly the scheme, the host and the port.
"unsafe-url"meaning that the referrer will include the origin and the path (but not the fragment, password, or username). This case is unsafe as it can leak path information that has been concealed to third-party by using TLS.
var img = new Image(); img.src = 'img/logo.png'; img.referrerPolicy = 'origin'; var div = document.getElementById('divAround'); div.appendChild(img); // Fetch the image using the origin as the referrer
The definition of 'referrerPolicy attribute' in that specification.
|Candidate Recommendation||Added the
We're converting our compatibility data into a machine-readable JSON format. This compatibility table still uses the old format, because we haven't yet converted the data it contains. Find out how you can help!
|Feature||Chrome||Edge||Firefox (Gecko)||Internet Explorer||Opera||Safari (WebKit)|
|Basic support||51||?||50.0 (50.0) ||?||38||?|
|Feature||Android Webview||Chrome for Android||Firefox Mobile (Gecko)||IE Phone||Opera Mobile||Safari Mobile|
|Basic support||51||51||50.0 (50.0) ||?||?||?|
 From Firefox 45 to 50, this was behind the
network.http.enablePerElementReferrer preference. From Firefox 42 to 44 include this property was called