The referrerPolicy
attribute can be used on any element that makes network requests. Here are the main ones:
- Link elements:
<a href="..." referrerPolicy="no-referrer">Link</a>
<link rel="stylesheet" href="..." referrerPolicy="no-referrer">
- Media elements:
<img src="..." referrerPolicy="no-referrer">
<video src="..." referrerPolicy="no-referrer">
<audio src="..." referrerPolicy="no-referrer">
- Embeds/iframes:
<iframe src="..." referrerPolicy="no-referrer">
<embed src="..." referrerPolicy="no-referrer">
<object data="..." referrerPolicy="no-referrer">
- Resource fetching:
<script src="..." referrerPolicy="no-referrer">
<source src="..." referrerPolicy="no-referrer">
You can also set a global referrer policy for all requests using a meta tag:
<meta name="referrer" content="no-referrer">
The available policy values are:
no-referrer
no-referrer-when-downgrade
(default)origin
origin-when-cross-origin
same-origin
strict-origin
strict-origin-when-cross-origin
unsafe-url
Most commonly you'll see this used on images and iframes for privacy/security reasons.