From b0a06667bb4439d52d376302fe74fa055a6f348c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Philip=20J=C3=A4genstedt?= Date: Wed, 5 Jun 2024 16:58:24 +0200 Subject: [PATCH 1/2] Add referrer policy draft feature --- features/draft/referrer-policy.yml | 70 +++++++++++++++++++++++++ features/draft/referrer-policy.yml.dist | 6 +++ 2 files changed, 76 insertions(+) create mode 100644 features/draft/referrer-policy.yml create mode 100644 features/draft/referrer-policy.yml.dist diff --git a/features/draft/referrer-policy.yml b/features/draft/referrer-policy.yml new file mode 100644 index 0000000000..78625c9aa0 --- /dev/null +++ b/features/draft/referrer-policy.yml @@ -0,0 +1,70 @@ +draft_date: 2024-06-07 +name: Referrer policy +description: TODO +spec: https://w3c.github.io/webappsec-referrer-policy/ +caniuse: referrer-policy +compat_features: + - api.HTMLAnchorElement.referrerPolicy + - api.HTMLAnchorElement.referrerPolicy.no-referrer-when-downgrade + - api.HTMLAnchorElement.referrerPolicy.origin-when-cross-origin + - api.HTMLAnchorElement.referrerPolicy.unsafe-url + - api.HTMLAreaElement.referrerPolicy + - api.HTMLAreaElement.referrerPolicy.no-referrer-when-downgrade + - api.HTMLAreaElement.referrerPolicy.origin-when-cross-origin + - api.HTMLAreaElement.referrerPolicy.unsafe-url + - api.HTMLIFrameElement.referrerPolicy + - api.HTMLIFrameElement.referrerPolicy.no-referrer-when-downgrade + - api.HTMLIFrameElement.referrerPolicy.origin-when-cross-origin + - api.HTMLIFrameElement.referrerPolicy.unsafe-url + - api.HTMLImageElement.referrerPolicy + - api.HTMLImageElement.referrerPolicy.no-referrer-when-downgrade + - api.HTMLImageElement.referrerPolicy.origin-when-cross-origin + - api.HTMLImageElement.referrerPolicy.unsafe-url + - api.HTMLLinkElement.referrerPolicy + - api.HTMLLinkElement.referrerPolicy.no-referrer-when-downgrade + - api.HTMLLinkElement.referrerPolicy.origin-when-cross-origin + - api.HTMLLinkElement.referrerPolicy.unsafe-url + - api.HTMLScriptElement.referrerPolicy + - api.HTMLScriptElement.referrerPolicy.no-referrer-when-downgrade + - api.HTMLScriptElement.referrerPolicy.origin-when-cross-origin + - api.HTMLScriptElement.referrerPolicy.unsafe-url + - api.Request.referrerPolicy + - api.SVGAElement.referrerPolicy + - api.fetch.init_referrerPolicy_parameter + - html.elements.a.referrerpolicy + - html.elements.a.referrerpolicy.no-referrer-when-downgrade + - html.elements.a.referrerpolicy.origin-when-cross-origin + - html.elements.a.referrerpolicy.unsafe-url + - html.elements.area.referrerpolicy + - html.elements.area.referrerpolicy.no-referrer-when-downgrade + - html.elements.area.referrerpolicy.origin-when-cross-origin + - html.elements.area.referrerpolicy.unsafe-url + - html.elements.iframe.referrerpolicy + - html.elements.iframe.referrerpolicy.no-referrer-when-downgrade + - html.elements.iframe.referrerpolicy.origin-when-cross-origin + - html.elements.iframe.referrerpolicy.unsafe-url + - html.elements.img.referrerpolicy + - html.elements.img.referrerpolicy.no-referrer-when-downgrade + - html.elements.img.referrerpolicy.origin-when-cross-origin + - html.elements.img.referrerpolicy.unsafe-url + - html.elements.link.referrerpolicy + - html.elements.link.referrerpolicy.no-referrer-when-downgrade + - html.elements.link.referrerpolicy.origin-when-cross-origin + - html.elements.link.referrerpolicy.unsafe-url + - html.elements.script.referrerpolicy + - html.elements.script.referrerpolicy.no-referrer-when-downgrade + - html.elements.script.referrerpolicy.origin-when-cross-origin + - html.elements.script.referrerpolicy.unsafe-url + - html.elements.script.type.speculationrules.referrer_policy + - http.headers.Referrer-Policy + - http.headers.Referrer-Policy.default_strict-origin-when-cross-origin + - http.headers.Referrer-Policy.no-referrer-when-downgrade + - http.headers.Referrer-Policy.origin-when-cross-origin + - http.headers.Referrer-Policy.same-origin + - http.headers.Referrer-Policy.strict-origin + - http.headers.Referrer-Policy.strict-origin-when-cross-origin + - http.headers.Referrer-Policy.unsafe-url + - svg.elements.a.referrerpolicy + - svg.elements.a.referrerpolicy.no-referrer-when-downgrade + - svg.elements.a.referrerpolicy.origin-when-cross-origin + - svg.elements.a.referrerpolicy.unsafe-url diff --git a/features/draft/referrer-policy.yml.dist b/features/draft/referrer-policy.yml.dist new file mode 100644 index 0000000000..e510419c89 --- /dev/null +++ b/features/draft/referrer-policy.yml.dist @@ -0,0 +1,6 @@ +# Generated from: referrer-policy.yml +# Do not edit this file by hand. Edit the source file instead! + +status: + baseline: false + support: {} From 89c105165ed5f0e1b4ab2e950225924ff2f1b650 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Philip=20J=C3=A4genstedt?= Date: Mon, 10 Jun 2024 16:42:46 +0200 Subject: [PATCH 2/2] Update features/draft/referrer-policy.yml Co-authored-by: Daniel D. Beck --- features/draft/referrer-policy.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/features/draft/referrer-policy.yml b/features/draft/referrer-policy.yml index 78625c9aa0..f160e34c60 100644 --- a/features/draft/referrer-policy.yml +++ b/features/draft/referrer-policy.yml @@ -1,6 +1,6 @@ draft_date: 2024-06-07 name: Referrer policy -description: TODO +description: The `Referrer-Policy` header and `referrerpolicy` HTML attributes control whether requests have the `Referer` header and what information the header contains. spec: https://w3c.github.io/webappsec-referrer-policy/ caniuse: referrer-policy compat_features: