jeans/frontend
jeans/frontend
1
0
Fork 0
mirror of https://github.com/home-assistant/frontend.git synced 2025-07-07 17:36:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Don't send the Referer header to other origins. (#1092)

Browse Source 
Avoid leaking the Home Assistant domain name (which often contains a person's name/alias) in the Referer header for non-same-origin requests.
This commit is contained in:
Matt N 2018-04-17 07:01:00 -07:00 committed by Paulus Schoutsen
parent 8047313165
commit a2ec19e10f
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
index.html
View File

@ -19,6 +19,7 @@
<meta name="msapplication-square310x310logo" content="/static/icons/tile-win-310x310.png"/>
<meta name="msapplication-TileColor" content="#3fbbf4ff"/>
<meta name='mobile-web-app-capable' content='yes'>
<meta name='referrer' content='same-origin'>
<meta name='viewport' content='width=device-width, user-scalable=no'>
<meta name='theme-color' content='{{ theme_color }}'>
<style>