<meta name="referrer">
Baseline Widely available
This feature is well established and works across many devices and browser versions. It’s been available across browsers since January 2020.
Thereferrer value for thename attribute of the<meta> element controls the HTTPReferer header of requests sent from the document.If specified, you define the referrer using acontent attribute in the<meta> element as a keyword value.
For example, the following<meta> element sends theorigin of the document as the referrer:
<meta name="referrer" content="origin" />Warning:Dynamically inserting<meta name="referrer"> (withdocument.write() orappendChild()) makes the referrer behavior unpredictable.When several conflicting policies are defined, theno-referrer policy is applied.
In this article
Usage notes
A<meta name="referrer"> element has the following additional attributes:
contentSets the document referrer. You must define this attribute.Accepts one of the following values:
no-referrerDoes not send an HTTP
Refererheader.originSends the origin of the document.
no-referrer-when-downgradeSends the full URL when the destination is at least as secure as the current page (HTTP(S)→HTTPS), but sends no referrer when it's less secure (HTTPS→HTTP). This is the default behavior.
origin-when-cross-originSends the full URL (stripped of parameters) for same-origin requests, but only sends the origin for other cases.
same-originSends the full URL (stripped of parameters) for same-origin requests. Cross-origin requests will contain no referrer header.
strict-originSends the origin when the destination is at least as secure as the current page (HTTP(S)→HTTPS), but sends no referrer when it's less secure (HTTPS→HTTP).
strict-origin-when-cross-originSends the full URL (stripped of parameters) for same-origin requests. Sends the origin when the destination is at least as secure as the current page (HTTP(S)→HTTPS). Otherwise, sends no referrer.
unsafe-URLSends the full URL (stripped of parameters) for same-origin or cross-origin requests.
Examples
>Removing a referrer from requests
The following<meta> element specifies that the document shouldn't send aReferer header with HTTP requests from the document:
<meta name="referrer" content="no-referrer" />Specifications
| Specification |
|---|
| HTML> # meta-referrer> |
Browser compatibility
See also
- HTTP
Refererheader