[#30238] - [4.0] Update default behavior for the referrer policy
- Fixed in Code Base
- 4 Aug 2020
- Medium
- Build: 4.0-dev
- # 30238
- Diff
- zero-24:ref-policy-update
User tests: Successful: Unsuccessful:
Summary of Changes
Update default behavior for the referrer policy from no-referrer-when-downgrade to strict-origin-when-cross-origin.
The details can be checked here: https://web.dev/referrer-best-practices/ with Chrome 85 this is going to be the default in the browsers too.
Testing Instructions
check the default option for the referrer policy
apply this patch
check the default option for the referrer policy has been updated to strict-origin-when-cross-origin
Actual result BEFORE applying this Pull Request
Default is no-referrer-when-downgrade
Expected result AFTER applying this Pull Request
Default is strict-origin-when-cross-origin
Documentation Changes Required
| Status | New | ⇒ | Pending |
joomla-cms-bot
- | Category | ⇒ | Front End Plugins |
Change this in plugin code too.
| Labels |
Added:
?
?
|
||
I have tested this item
Tested successfully in Beta4-dev of 2 August in Wampserver 3.2.2 using PHP 7.4.8.
Both the default referrer policy in the plugin and referrer-policy in the response header worked as described.
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/30238.
I have tested this item
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/30238.
| Status | Pending | ⇒ | Ready to Commit |
RTC
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/30238.
I have tested this item
### BEFORE
- System -> Plugins -> System - HTTP Headers has the referrer policy set to
no-referrer-when-downgrade - Using Firefox 79.0 (64-Bit) -> Dev Tools -> Network Analysis the referrer policy is set to
no-referrer-when-downgrade
AFTER
- System -> Plugins -> System - HTTP Headers has the referrer policy set to
strict-origin-when-cross-origin - Using Firefox 79.0 (64-Bit) -> Dev Tools -> Network Analysis the referrer policy is set to
strict-origin-when-cross-origin
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/30238.
I have tested this item
Tested with Chrome on Win64.
Both the default referrer policy in the plugin and referrer-policy in the response header worked as described.
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/30238.
roland-d
- | Status | Ready to Commit | ⇒ | Fixed in Code Base |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2020-08-04 11:26:24 |
| Closed_By | ⇒ | roland-d | |
| Labels |
Added:
?
|
||
I have tested this item✅ successfully on 172be57
Tested successfully in Beta4-dev of 31 July.
This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/30238.