Opened 7 years ago

Closed 5 years ago

#29406 closed New feature (fixed)

Add Referrer-Policy header support

Reported by: James Bennett Owned by: James Bennett
Component: Utilities Version: dev
Severity: Normal Keywords:
Cc: Triage Stage: Ready for checkin
Has patch: yes Needs documentation: no
Needs tests: no Patch needs improvement: no
Easy pickings: no UI/UX: no

Description

Background information on django-dev list:

​https://groups.google.com/forum/#!topic/django-developers/DDpkrvFdnvk

Other parts of that proposal still need work, but Referrer-Policy seemed to have consensus to go ahead and do.

Change History (6)

comment:1 by James Bennett, 6 years ago

I'm going to leave this on hold for now. I'm currently supporting the feature via a third-party app (django-referrer-policy), and I want to work out the issues with browser support there, rather than burden Django itself with them. Once that's figured out, I'll contribute the code back to Django.

comment:2 by James Bennett, 6 years ago

Triage Stage: Accepted → Someday/Maybe

comment:3 by Claude Paroz, 5 years ago

Has patch: set
Triage Stage: Someday/Maybe → Accepted

I reopened a ​PR based on James initial work.
I hope that in conjunction with #30426, this would mean a more secure Django 3.0 by default.

comment:4 by Claude Paroz, 5 years ago

My PR was closed in favor of the ​one from Nick.

comment:5 by Carlton Gibson, 5 years ago

Triage Stage: Accepted → Ready for checkin

comment:6 by Carlton Gibson <carlton.gibson@…>, 5 years ago

Resolution: → fixed
Status: assigned → closed

In 406dba04:

Fixed #29406 -- Added support for Referrer-Policy header.

Thanks to James Bennett for the initial implementation.

Note: See TracTickets for help on using tickets.
Back to Top