[HTTP] Set referrer policy default to strict-origin-when-cross-origin

[chrisdavidmills]

Acceptance criteria

1. • The listed features are documented sufficiently on MDN
2. • BCD is updated
3. • Interactive example and data repos are updated if appropriate - NA
4. • The content has been reviewed as needed

Features to document

1. Set referrer policy default to strict-origin-when-cross-origin

Related Gecko bugs

1. • Set referrer policy default to strict-origin-when-cross-origin

Looks like probably a pretty small change — rel note, page change, BCD entry?

For folks helping with Firefox-related documentation features — make sure above AC have been done, but also:

• Set bugs to dev-doc-complete
• Add entry to Firefox release notes if feature is enabled in release
• Add entry to Firefox experimental features page if feature is not yet enabled in release

[hamishwillee]

Review/Status update.

• BCD is updated
• Release note - Done in HTTP Referrer-Policy - new default value in spec #2792
• Dev-doc-complete - added comment here. Chris you will need to mark when docs complete
• Docs
  • HTTP/Headers/Referer - updated in HTTP Referrer-Policy - new default value in spec #2792. Primarily to make better cross link to Referrer-Policy and make it clear that this is where the contents of Referer get determined.
  • Referer header: privacy and security concerns - Minor subedit in HTTP Referrer-Policy - new default value in spec #2792
  • HTTP/Headers/Referrer-Policy
    • BCD update required to move change in default value to BCD. Note, change to include FF preference setting in BCD rejected.
    • Add back notes on Firefox preferences - Add information about firefox default preferences #2954
    • Doc update to change default setting. - Fixed in HTTP Referrer-Policy - new default value in spec #2792

Chris, what do we do about these docs that are not under our control?:

• Refers to the old default: https://infosec.mozilla.org/guidelines/web_security.html#referrer-policy

[hamishwillee]

@chrisdavidmills FYI This is pretty much done except for adding back browser preference notes in #2954 . The BCD will go in shortly.

[chrisdavidmills]

Done, and closed!