Path: csiph.com!newsfeed.xs4all.nl!newsfeed7.news.xs4all.nl!nzpost2.xs4all.net!not-for-mail
Newsgroups: comp.lang.javascript
Subject: Re: Chrome and passing on cross-origin
From: "Evertjan." <exxjxw.hannivoort@inter.nl.net>
References: <rmdmmp$2c5l$3@gallifrey.nk.ca> <b5a88d78-d1a3-43ed-bd88-f538d178c8ean@googlegroups.com>
Date: Sat, 17 Oct 2020 11:00:20 +0200
Message-ID: <XnsAC596FF47280Feejj99@194.109.6.166>
User-Agent: Xnews/2009.05.01
Lines: 51
NNTP-Posting-Host: 4bc65550.newszilla.xs4all.nl
X-Trace: G=xMDSEaot,C=U2FsdGVkX1/e47TpUszBrKWG5EVD1S6gQAo8wWacU3ufqgQ33FvzRpI0V9P4hNRA7Dew2oSoXfYByDLxh5ZJ5rFvIY88bzbxam9FGSquJaImJJmMZLyA6Xwdy9L/xuMs
X-Complaints-To: abuse@xs4all.nl
Xref: csiph.com comp.lang.javascript:38968

"Michael Haufe (TNO)" <tno@thenewobjective.com> wrote on 17 Oct 2020 in
comp.lang.javascript: 

> On Friday, October 16, 2020 at 9:59:47 PM UTC-5, The Doctor wrote:
>> Anyone familiar with 
>> 
>> https://developers.google.com/web/updates/2020/07/referrer-policy-new-ch
>> rome-default/ 
>> 
>> ? 
>> 
>> I have a php seesion that uses this javascript 
>> snippet 

php is serverside and doesn't use Javascript.

For the rest I agree with Michael.

>> 
>> : 
>> 
>> <script 

This surely is clientside.

>> src="https://code.jquery.com/jquery-3.3.1.js" 
>> integrity="sha256-2Kok7MbOyxpgUVvAk/HJ2jigOSYS2auK4Pfzbm7uH60=" 
>> crossorigin="anonymous"></script> 
>> <script> 
>> 
>> If I read google developers correctly, I might have to 
>> change this snippet. 
>> 
>> What is least path of resistance to accomplish this change? 
> 
> Google's update should be irrelevant to you practically.
> 
> Though you should define a content security policy for your website.
> 
> <https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP>
> 
> Test its quality with:
> 
> <https://observatory.mozilla.org/>



-- 
Evertjan.
The Netherlands.
(Please change the x'es to dots in my emailaddress)