LDAPWiki: HTTP Referer

Overview#

HTTP Referer is a HTTP Request Header contains the address of the previous web page from which a link to the currently requested page was followed.

HTTP Referer allows servers to identify where people are visiting them from and may use that data for analytics, logging, or optimized caching, for example.

Note that referer is actually a misspelling of the word "referrer"

HTTP Referer has the potential to reveal information about the browsing history of the user, which is a Privacy Considerations. (Unvalidated redirects and forwards)

HTTP Referer header SHOULD NOT not sent by browsers if:

the referring resource is a local "file" or "data" URI,
an unsecured HTTP request is used and the referring page was received with a secure protocol (HTTPS).

More Information#

There might be more information for this subject on one of the following:

Unvalidated redirects and forwards

[#1] - Referer - based on information obtained 2018-03-21-