From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!.POSTED!not-for-mail From: Lars Ingebrigtsen Newsgroups: gmane.emacs.bugs Subject: bug#27012: 26.0.50; eww does not generate Referer headers Date: Mon, 22 May 2017 18:53:42 +0200 Message-ID: References: NNTP-Posting-Host: blaine.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: blaine.gmane.org 1495472055 7757 195.159.176.226 (22 May 2017 16:54:15 GMT) X-Complaints-To: usenet@blaine.gmane.org NNTP-Posting-Date: Mon, 22 May 2017 16:54:15 +0000 (UTC) User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.0.50 (gnu/linux) Cc: Richard Stallman , 27012@debbugs.gnu.org To: Glenn Morris Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Mon May 22 18:54:09 2017 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by blaine.gmane.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dCqav-0001pY-6f for geb-bug-gnu-emacs@m.gmane.org; Mon, 22 May 2017 18:54:09 +0200 Original-Received: from localhost ([::1]:43965 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dCqb0-00065o-Dk for geb-bug-gnu-emacs@m.gmane.org; Mon, 22 May 2017 12:54:14 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:49039) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dCqat-000656-F1 for bug-gnu-emacs@gnu.org; Mon, 22 May 2017 12:54:08 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dCqao-0006K6-JB for bug-gnu-emacs@gnu.org; Mon, 22 May 2017 12:54:07 -0400 Original-Received: from debbugs.gnu.org ([208.118.235.43]:58697) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1dCqao-0006Jw-GL for bug-gnu-emacs@gnu.org; Mon, 22 May 2017 12:54:02 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1dCqao-0000ni-0n for bug-gnu-emacs@gnu.org; Mon, 22 May 2017 12:54:02 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Lars Ingebrigtsen Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Mon, 22 May 2017 16:54:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 27012 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: Original-Received: via spool by 27012-submit@debbugs.gnu.org id=B27012.14954720273056 (code B ref 27012); Mon, 22 May 2017 16:54:01 +0000 Original-Received: (at 27012) by debbugs.gnu.org; 22 May 2017 16:53:47 +0000 Original-Received: from localhost ([127.0.0.1]:33141 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dCqaY-0000nE-Vh for submit@debbugs.gnu.org; Mon, 22 May 2017 12:53:47 -0400 Original-Received: from hermes.netfonds.no ([80.91.224.195]:58942) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dCqaY-0000n5-1W for 27012@debbugs.gnu.org; Mon, 22 May 2017 12:53:46 -0400 Original-Received: from cm-84.209.243.26.getinternet.no ([84.209.243.26] helo=stories) by hermes.netfonds.no with esmtpsa (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.84_2) (envelope-from ) id 1dCqaU-00030C-Ep; Mon, 22 May 2017 18:53:44 +0200 Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAGFBMVEVOXX5pfZFKTGJFN0ha bYmPpKFzjaM1HRrHh4cEAAACd0lEQVQ4jVVUwW6jMBR0KR+Q1yXkakyqXpO4FVeILO4ksfe6qMH3 FlX8/s57QFbrKELyMDN+4/dQB5MYbZK9Ts57c9a6LE/W2pNVe1XX+6R+SjfUuk2TJokxZWkBuI1L 09j2IeR9JMo2hpdVBwZUGOIQgg8h9PcFeCKihoL3g/cejxCgZUqr3lVGTRtijGDx466USgx73GPj Iq+e/65egCeSHXj4i++oJ3dOxIMZvAbqtq9bn2cOHGYUzSxztXaa7PZGQLR5AGEoJ15jl5NTepYS hp+B6Zjnzs3meRyG0F3mfTsW0NLIRRVi3r0twFRQA0aynuo6resL5ihE6oDU7lt2K9gT8amM2qdg 9L5agGrcL4xCTtVVq9R4o9lDpGInznaEx2WVUmy+43ctFz+u5qh8GHoDqern12jFXKTEo+e67c/l 4zp96QYFruneqYLSj/fX6Vs7NdeRR9zqBUAlwLjnSIxZjwvXanxlIFukjgLcJA3vf4PRrOkGbhCJ XIA5klK9cyQxSCEnAPb272pRued47dbvpuPtcbU90vWdAC9v07FztXTJIsXxHj3tpva+SnGInm3h QW9j6GiWAiOHhwBFV36E29IlhzST9vlkgMrXeHfqP6lPuZDCB8rOPDnqoLJcOj1mictjj+6BFADc +QLIGPTxATjaYsejFtSDKcrQ7YtUG9s4r5x65x5S7BGXiaI+Q316YYDiUUmHww1d8LRKOdfgbfw6 GcHNn1lKu8y1AAYf2D/EzWVlKJWq2qUOd8qDiWhPFsAJnwyl6hSAWwGZc60FWBj4SCBAXgo0o+2z 1oa/PqIyA5q/RdjUSV3oc3Ion08C/AV1oB5AxCZWzAAAAABJRU5ErkJggg== In-Reply-To: (Glenn Morris's message of "Mon, 22 May 2017 12:37:00 -0400") X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-Received-From: 208.118.235.43 X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane.org@gnu.org Original-Sender: "bug-gnu-emacs" Xref: news.gmane.org gmane.emacs.bugs:132735 Archived-At: Glenn Morris writes: > You could look at how GNU Icecat handles this, eg > network.http.referer.spoofSource. (I would guess every privacy issue eww > might encounter has already been considered by Icecat.) network.http.referer.XOriginPolicy 0 - always send referrer (default). 1 - only send if base domains match. 2 - only send if hosts match. Adding something like this (and defaulting to 1) might make sense for eww. -- (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no