FrontendHaltSecurity·Intermediate·Conceptual·1 min read
What is Referrer-Policy for?
Short interview answer
It controls how much of the current URL is sent in the Referer header on outgoing requests and navigations. A strict value like strict-origin-when-cross-origin prevents leaking full paths and query strings — which can contain tokens or identifiers — to third-party origins.
Key takeaway
Explain the underlying mental model clearly, then support it with a concrete example and its trade-offs.