Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Obscure or prevent referer for outgoing links in piwik via rel=noreferrer (works in Firefox) #3147

Closed
ryrun opened this issue May 18, 2012 · 8 comments
Labels
c: Privacy For issues that impact or improve the privacy. c: Security For issues that make Matomo more secure. Please report issues through HackerOne and not in Github. Enhancement For new feature suggestions that enhance Matomo's capabilities or add a new report, new API etc.
Milestone

Comments

@ryrun
Copy link

ryrun commented May 18, 2012

Currently all links of extenal websites will send a referer of the current stats view in piwik (date, websiteid, ...), which could be logged by their stat software.

Would be nice to prevent this.

Some ways to do it:
http://stackoverflow.com/questions/8893269/what-is-the-most-reliable-way-to-hide-spoof-the-referrer-in-javascript
Keywords: referer

@mattab
Copy link
Member

mattab commented May 24, 2012

Thanks for the suggestion

@mattab
Copy link
Member

mattab commented May 26, 2012

Unfortunately it's not very easy and clean, I wish browsers would implement rel='noreferrer'...

@ryrun
Copy link
Author

ryrun commented Jun 4, 2012

Too bad that only webkit support rel='noreferrer'. :( But it could be added to the links anyway.
There is a bug report for firefox about this: https://bugzilla.mozilla.org/show_bug.cgi?id=530396
It's possible to see this feature in future. I hope.

@mattab
Copy link
Member

mattab commented Dec 14, 2012

Let's do this after Firefox has implemented the feature.

@nicwortel
Copy link

@mattab what's the status on this? Firefox supports for the rel="noreferrer" attribute since Firefox 33 (although the referrer is still sent when you follow a link through a context menu, for instance when you right click and then click 'Open Link in New Tab').

So, when will Piwik start supporting this?

@mattab mattab reopened this Oct 17, 2014
@mattab mattab removed the duplicate For issues that already existed in our issue tracker and were reported previously. label Oct 17, 2014
@mattab mattab modified the milestones: Mid term, Long term Oct 17, 2014
@mattab mattab added the c: Privacy For issues that impact or improve the privacy. label Oct 17, 2014
@mattab
Copy link
Member

mattab commented Oct 17, 2014

@nicwortel thanks for the tip. is it now supported by webkit + Chrome + Firefox then? that would be very convincing to start setting rel=noreferrer in all outgoing Piwik links!

@nicwortel
Copy link

@mattab I haven't had the chance to test other browsers, but on my Firefox 33 it seems to work (but, as I said, only when you click the link, not when you right-click it and then click Open Page in New Tab).

@mattab mattab changed the title Obscure or prevent referer for outgoing links in piwik via rel=noreferrer Obscure or prevent referer for outgoing links in piwik via rel=noreferrer (works in Firefox) Nov 27, 2014
@mattab mattab closed this as completed in 9c165f4 Nov 27, 2014
@mattab
Copy link
Member

mattab commented Nov 27, 2014

@nicwortel @ryrun Should be done now!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
c: Privacy For issues that impact or improve the privacy. c: Security For issues that make Matomo more secure. Please report issues through HackerOne and not in Github. Enhancement For new feature suggestions that enhance Matomo's capabilities or add a new report, new API etc.
Projects
None yet
Development

No branches or pull requests

3 participants