Directive: referrer

Overview

Caution

Obsolete: The referrer directive existed in an earlier draft of the CSP Level 3 (Draft) specification, but was removed.

The referrer directive was meant to specify information in the Referer header (with a single r as this was a typo in the original spec) for links away from a page. This is deprecated and removed from browsers. In its place, see the Referrer-Policy header.

Required reading:

• Can I use referrer?
• MDN Web Docs reference

Fallbacks

❌ referrer does not fallback to default-src.

Possible errors

[ERROR] directive referrer was experimental in CSP3, but should now be removed from CSP policies

At present, referrer is not part of any CSP specification and should be removed.

References

• MDN Web Docs reference
• Can I use referrer?