Opened 5 years ago

Closed 5 years ago

#12739 closed task (wontfix)

Option to disable the Referer Header

Reported by: cypherpunks Owned by:
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Keywords: referer_header
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

[Due to the discussion on tor-talk mailing list]

The Referer Header isn't disabled by default "because of
the non-trivial number of sites that rely on the Referer header to authenticate image requests and deep-link navigation on their
sites". Anyway, we need to add such option to the TorButton setting list just to make configuration more comfortable.

Look up for network.http.sendRefererHeader in about:config.

Child Tickets

Change History (1)

comment:1 in reply to:  description Changed 5 years ago by gk

Component: TorbuttonTor Browser
Resolution: wontfix
Status: newclosed

Replying to cypherpunks:

[Due to the discussion on tor-talk mailing list]

The Referer Header isn't disabled by default "because of
the non-trivial number of sites that rely on the Referer header to authenticate image requests and deep-link navigation on their
sites". Anyway, we need to add such option to the TorButton setting list just to make configuration more comfortable.

That does not help, see the remaining parts of the section you quote: https://www.torproject.org/projects/torbrowser/design/#deprecate section 1. Thus, there are no plans to implement a generic option to spoof the Referer.

Note: See TracTickets for help on using tickets.