Send full path when performing a same-origin request. Send only origin when the security level stays the same (e.g. HTTPS to HTTPS). Send no header to a less secure destination (HTTPS to HTTP)
Example:
HTML
<!DOCTYPE html>
<html>
<body>
<h1>The iframe referrerpolicy strict-origin-when-cross-origin attribute</h1>
<iframe src="https://horje.com/" referrerpolicy="strict-origin-when-cross-origin"> <p>Your browser does not support iframes.</p>
</iframe>
</body>
</html>
Type
: |
html |
Category
: |
Web Tutorial |
Sub Category
: |
HTML Tag |
Uploaded by
: |
Admin |