Online Referrer-Policy Builder & Scenario Tester
Configure HTTP Referrer-Policy headers and HTML meta tags. Test how user navigation URLs, pathnames, and query parameters are transmitted or redacted across same-origin and cross-origin requests.
1. Select Referrer-Policy
2. Generated Headers & Tags
HTML META TAG:
Navigation Scenario Matrix
Simulating origin URL: https://mysite.com/shop/item?id=42
| Navigation Scenario | Destination Protocol / Host | Transmitted Referer Header |
|---|
Controlling the HTTP Referer Header
The HTTP Referer header indicates the previous webpage address from which a link was followed. If unconstrained, query parameters containing user tokens, tracking IDs, or personal data can leak to external third parties and analytics endpoints.
Recommended Standard Policy
The industry-standard recommendation for modern web applications is strict-origin-when-cross-origin:
- Preserves full URL context for internal application navigation.
- Trims URLs to the naked domain origin (e.g.
https://mysite.com/) when making requests to external cross-origin domains. - Completely strips the Referer header if navigating to an unencrypted HTTP destination.