Refer(r)er Policy - Don't leak sensitive information in your HTTP headers

Join us as we continue our journey through essential security-related HTTP headers! In this video, we dive deep into Referrer-Policy, a crucial header that gives you control over what information is sent in the Referer HTTP header.

Ever wondered why your browser sends the URL of the current page to other sites? While sometimes useful for analytics or debugging, it can also leak sensitive information like secret hostnames, folder structures, or even query string data to third parties.

Discover how this W3C standard, supported by all modern browsers, allows you to:
* Completely remove the Referer header with no-referrer.
* Limit information to just the protocol, domain, and port using origin.
* Understand the default, secure behavior of strict-origin-when-cross-origin.
* Avoid the dangerous unsafe-url option.

#ReferrerPolicy #SecurityTips #WebSecurity #DuendeSoftware #dotnet

https://duendesoftware.com

Видео Refer(r)er Policy - Don't leak sensitive information in your HTTP headers канала Duende Software