Tiny Tiny RSS

Posted: **01 Jun 2016, 15:32**

Sets a Referrer Policy that suppresses the HTTP referer (sic) header when clicking on links from Tiny Tiny RSS to external websites. Totally coincidentally, by excluding this header TT-RSS will also bypasses some anti-image hotlinking systmes that looks for this header from non-whitelisted origins. *cough*

The tiny tiny attached patch will thus slightly boost privacy of private Tiny Tiny RSS installations and bypass some image hotlinking countermeasures.

Posted: **01 Jun 2016, 16:19**

this makes sense, i guess

Posted: **03 Jun 2016, 11:41**

Chrome doesn't seem to recognize "none" as a valid referrer policy, it ignores the meta tag and goes with its default. The full error message (which includes its list of valid referrer policies) is in the image i attached.

Posted: **03 Jun 2016, 12:06**

yeah "none" is not in the draft, probably should be set to no-referrer

Tiny Tiny RSS

[patch] Don’t send HTTP referrer headers to keep installations a little more private

[patch] Don’t send HTTP referrer headers to keep installations a little more private

Re: [patch] Don’t send HTTP referrer headers to keep installations a little more private

Re: [patch] Don’t send HTTP referrer headers to keep installations a little more private

Re: [patch] Don’t send HTTP referrer headers to keep installations a little more private