300942 - <base href> and background: url(); send the wrong referer for the image request

Status: RESOLVED FIXED

(Core :: CSS Parsing and Computation, defect)

Description

[Jan Moesen]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b3) Gecko/20050712 Firefox/1.0+
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b3) Gecko/20050712 Firefox/1.0+

When specifying a <base href="http://www.example.com/" />, images loaded via
CSS's "background: url()" syntax get the base href as the referer. Shouldn't
they have the real document as the referer?

Reproducible: Always

Steps to Reproduce:
1. Open URL with testcases
2. Observe how the first case (no base href) works fine
3. Observe how the second case sends http://www.disney.com/ as the referer
Actual Results:  
print-referer.jpg is a PHP script that prints the HTTP_REFERER. In case one it
works fine, but case two prints the wrong referer.

Expected Results:  
Have the referer be the document URL, not the base href.

Comment 1

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

Want to fix for b4, since a regression this cycle.

Comment 2

[Jan Moesen]

> Want to fix for b4, since a regression this cycle.
Not sure when that regressed, then. I also see this in Mozilla/5.0 (Windows; U;
Windows NT 5.1; en-US; rv:1.8a5) Gecko/20041122.

Comment 3

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

Attachment: fix

Comment 4

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

By "this cycle", I meant since 1.7.

Comment 5

[Boris Zbarsky [:bzbarsky]]

Comment on attachment 189457 [details] [diff] [review]
fix

r+sr=bzbarsky, but I'd also be fine with storing mURI on the scanner
unconditionally and exposing a getter for it; seems a little silly to store the
same URI in both places...

Comment 6

[David Baron :dbaron: (⌚️UTC-4, no longer working on Mozilla)]

Fix checked in to trunk, 2005-07-19 13:44 -0700.