← Back to glossary

HTTP Referrer header exposing previous URL (or origin) during navigation/requests; can leak sensitive context.

Definition

The Referrer header may include full URLs (path + query), which can expose identifiers or sensitive content. Sites can limit it with Referrer-Policy.

In plain English HTTP Referrer header exposing previous URL (or origin) during navigation/requests; can leak sensitive context.

Why this matters

Why it matters: Referrer leakage is a common privacy issue; minimizing it reduces unintended disclosure.

Example

Example: Use Referrer-Policy: strict-origin-when-cross-origin or no-referrer for sensitive pages.