{"action":"created","issue":{"url":"https://api.github.com/repos/w3c/webappsec/issues/175","labels_url":"https://api.github.com/repos/w3c/webappsec/issues/175/labels{/name}","comments_url":"https://api.github.com/repos/w3c/webappsec/issues/175/comments","events_url":"https://api.github.com/repos/w3c/webappsec/issues/175/events","html_url":"https://github.com/w3c/webappsec/pull/175","id":57418246,"number":175,"title":"Add a new \"referrer attribute\" delivery mechanism","user":{"login":"fmarier","id":167821,"avatar_url":"https://avatars.githubusercontent.com/u/167821?v=3","gravatar_id":"","url":"https://api.github.com/users/fmarier","html_url":"https://github.com/fmarier","followers_url":"https://api.github.com/users/fmarier/followers","following_url":"https://api.github.com/users/fmarier/following{/other_user}","gists_url":"https://api.github.com/users/fmarier/gists{/gist_id}","starred_url":"https://api.github.com/users/fmarier/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fmarier/subscriptions","organizations_url":"https://api.github.com/users/fmarier/orgs","repos_url":"https://api.github.com/users/fmarier/repos","events_url":"https://api.github.com/users/fmarier/events{/privacy}","received_events_url":"https://api.github.com/users/fmarier/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/w3c/webappsec/labels/REFERRER","name":"REFERRER","color":"0052cc"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":6,"created_at":"2015-02-12T05:10:48Z","updated_at":"2015-02-19T19:27:01Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/w3c/webappsec/pulls/175","html_url":"https://github.com/w3c/webappsec/pull/175","diff_url":"https://github.com/w3c/webappsec/pull/175.diff","patch_url":"https://github.com/w3c/webappsec/pull/175.patch"},"body":"This delivery mechanism is meant to subsume the rel=\"noreferrer\"\r\nlink type defined in the HTML5 spec:\r\n\r\n  https://html.spec.whatwg.org/multipage/semantics.html#link-type-noreferrer\r\n\r\nThis would allow for the following use case:\r\n\r\n- I don't want any referrers to be sent (i.e. global policy of\r\n\"no-referrer\" delivered via <meta> or CSP)\r\n- except for these two links that should reveal the origin of the\r\nreferring page (i.e. local policy of \"origin\" on the two <a> elements)"},"comment":{"url":"https://api.github.com/repos/w3c/webappsec/issues/comments/75118516","html_url":"https://github.com/w3c/webappsec/pull/175#issuecomment-75118516","issue_url":"https://api.github.com/repos/w3c/webappsec/issues/175","id":75118516,"user":{"login":"sc0ttbeardsley","id":13938,"avatar_url":"https://avatars.githubusercontent.com/u/13938?v=3","gravatar_id":"","url":"https://api.github.com/users/sc0ttbeardsley","html_url":"https://github.com/sc0ttbeardsley","followers_url":"https://api.github.com/users/sc0ttbeardsley/followers","following_url":"https://api.github.com/users/sc0ttbeardsley/following{/other_user}","gists_url":"https://api.github.com/users/sc0ttbeardsley/gists{/gist_id}","starred_url":"https://api.github.com/users/sc0ttbeardsley/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sc0ttbeardsley/subscriptions","organizations_url":"https://api.github.com/users/sc0ttbeardsley/orgs","repos_url":"https://api.github.com/users/sc0ttbeardsley/repos","events_url":"https://api.github.com/users/sc0ttbeardsley/events{/privacy}","received_events_url":"https://api.github.com/users/sc0ttbeardsley/received_events","type":"User","site_admin":false},"created_at":"2015-02-19T19:27:01Z","updated_at":"2015-02-19T19:27:01Z","body":"I agree with @briansmith regarding https://www.w3.org/Bugs/Public/show_bug.cgi?id=26533 It seems like a lot of work which will be prone to error to specify this in a JSON blob.\r\n\r\nI would like to see this PR land as it meets my needs for being able to override the per-document global policy for just a few links. LGTM"}}