Http Weak Referrer Policy Value
Description
Detects weak or insecure Referrer-Policy header configurations that could leak sensitive information through the Referer header. When unsafe policies like 'unsafe-url' or 'origin' are used, sensitive URL parameters and paths may be exposed to third-party sites, creating privacy and security risks.
Detection Strategy
• Checks only HTML responses for Referrer-Policy header values
• Reports a vulnerability if the rightmost supported value is weak ('origin', 'unsafe-url', 'origin-when-cross-origin', 'no-referrer-when-downgrade')
• Reports a vulnerability if header values are experimental or not in the specification
• No vulnerability is reported if the rightmost supported value is safe ('no-referrer', 'same-origin', 'strict-origin', 'strict-origin-when-cross-origin')
Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your 21-day free trial and discover the benefits of the Continuous Hacking Essential plan. If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' hacking team, fill out this contact form.