80390 - the referer is null while using tag <script src=>

Status: VERIFIED DUPLICATE of bug 64248

(Core :: Networking: HTTP, defect)

Description

[Chris]

From Bugzilla Helper:
User-Agent: Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)
BuildID:    2001050515

A simple example, in the site A , i want to retrieve some contents from the 
site B in javascript

so i write the following on the site A in a page:

<script scr="http://wwww.siteB.com/get_info.jsp"></script>

the site B when receiving the request, look at the referer which ask for 
information and then send correct contents for that site.

Under netscape / mozilla, the referer is always null, therefore my architecture 
cant work on those browsers (

For more information about the architecture check the following:

http://www.magelo.com/overview.html

Reproducible: Always
Steps to Reproduce:
1.go to http://www.magelo.com/forum


Actual Results:  Under Netscape / Mozilla , a security exception is thrown, 
means that the referer was null

Expected Results:  U should see the list of forums

Looks like Netscape / Mozilla dont put the referer in the header in that 
particular case

Comment 1

[Phil Schwartau]

--> DOM 

Comment 2

[Phil Schwartau]

cc'ing Mitch in case this is a known Security issue - 

Comment 3

[Chris]

forgot the .html in the url gave in the first step to reproduce the bug
sorry

Comment 4

[Mitchell Stoltz (not reading bugmail)]

I don't think this is a security issue, not directly anyway. Reporter, the issue
is that the HTTP request generated by a SCRIPT SRC= tag requesting the script
does not include a referrer header, right? If that's the bug, then this is a
Networking issue. We have some guidelines for when a referrer should be included
and when not, and I'm not sure in this case. Sometimes it's a privacy issue. Do
we set referrer headers in requests for other types of included content, like
images? 

Comment 5

[Matthias Versen [:Matti]]

is this not a dupe of bug 74284 ?

Comment 6

[Chris]

Ya Mitchell,its exactly the trouble.
my report looks like a dupe of <a ref="http://bugzilla.mozilla.org/show_bug.cgi?
id=64248">Bugzilla Bug 64248</a>

like Ian 'Hixie' Hickson said, in three tier application where another website 
hosts just the content but points to scripts on other hosts the referrer is 
vital.



 
 

Comment 7

[Gagan]

->0.9.2

Comment 8

[benc]

qa to me.

Comment 9

[benc]

*** This bug has been marked as a duplicate of 64248 ***

Comment 10

[John Unruh]

Verified dupe.