Update browser default Referrer-Policy

[michaelkennedy]

The default policy has been changed to strict-origin-when-cross-origin.

See w3c/webappsec-referrer-policy#142

[baknu]

Many thanks for your feedback! This new default policy is in the Editor's Draft , but not yet in the Candidate Recommendation. Correct?

Do you know if browsers have already changed accordingly?

For reference:

• Editor's Draft: https://w3c.github.io/webappsec-referrer-policy/#referrer-policies
• Candidate Recommendation: https://www.w3.org/TR/referrer-policy/#referrer-policy-no-referrer-when-downgrade

Btw we keep a separate private repo with NL and EN content. So if a content change is needed, we will apply it there.

[michaelkennedy]

My understanding is the current browser default is strict-origin-when-cross-origin, but I cannot claim to have full knowledge of all browsers.

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy

[baknu]

Thanks. I just made a separate content issue for this.