<meta name="referrer">
BaselineWidely available
This feature is well established and works across many devices and browser versions. It’s been available across browsers since January 2020.
Thereferrer value for thename attribute of the<meta> element controls the HTTPReferer header of requests sent from the document.If specified, you define the referrer using acontent attribute in the<meta> element as a keyword value.
For example, the following<meta> element sends theorigin of the document as the referrer:
<meta name="referrer" content="origin" />Warning:Dynamically inserting<meta name="referrer"> (withdocument.write() orappendChild()) makes the referrer behavior unpredictable.When several conflicting policies are defined, theno-referrer policy is applied.
Usage notes
A<meta name="referrer"> element has the following additional attributes:
contentSets the document referrer. You must define this attribute.Accepts one of the following values:
no-referrerDoes not send an HTTP
Refererheader.originSends the origin of the document.
no-referrer-when-downgradeSends the full URL when the destination is at least as secure as the current page (HTTP(S)→HTTPS), but sends no referrer when it's less secure (HTTPS→HTTP). This is the default behavior.
origin-when-cross-originSends the full URL (stripped of parameters) for same-origin requests, but only sends the origin for other cases.
same-originSends the full URL (stripped of parameters) for same-origin requests. Cross-origin requests will contain no referrer header.
strict-originSends the origin when the destination is at least as secure as the current page (HTTP(S)→HTTPS), but sends no referrer when it's less secure (HTTPS→HTTP).
strict-origin-when-cross-originSends the full URL (stripped of parameters) for same-origin requests. Sends the origin when the destination is at least as secure as the current page (HTTP(S)→HTTPS). Otherwise, sends no referrer.
unsafe-URLSends the full URL (stripped of parameters) for same-origin or cross-origin requests.
Examples
Removing a referrer from requests
The following<meta> element specifies that the document shouldn't send aReferer header with HTTP requests from the document:
<meta name="referrer" content="no-referrer" />Specifications
| Specification |
|---|
| HTML # meta-referrer |
Browser compatibility
See also
- HTTP
Refererheader