Privacy/2010-10-27 Shorten-Referer Meeting Notes: Difference between revisions

No edit summary
Line 199: Line 199:
the approach are compelling enough to (we think) take this idea very
the approach are compelling enough to (we think) take this idea very
seriously.
seriously.
=== Variation ===
One idea is a variant on this "postdata" approach, which would be to
add a mechanism to the browser to allow us to create form POSTs and
explicitly indicate that they don't need user intervention/approval.
We could then create a form with a target of the child iframe and POST
to the server.  This would have the advantage of being
a purely client-side modification that required no changes to the
protocol or the server implementations. Of course, it would work for
iframes but not img, script, css, etc. (It probably works for <a> since
that triggers a navigation).


= Tentative conclusion: =
= Tentative conclusion: =
canmove, Confirmed users
1,537

edits