Issue #1975 - Follow-up: Enable Origin header on same-origin by default.

I've used this setting without ill effects for weeks, including visiting
many a cloudflare-backed site. There is no issue there.
This commit is contained in:
Moonchild
2022-08-24 02:48:44 +02:00
committed by roytam1
parent cf5dfc5e7d
commit 1270657ba0
+2 -2
View File
@@ -1496,8 +1496,8 @@ pref("network.http.referer.XOriginTrimmingPolicy", 0);
pref("network.http.referer.XOriginPolicy", 0);
// Include an origin header on non-GET and non-HEAD requests regardless of CORS
// 0=never send, 1=send when same-origin only, 2=always send
pref("network.http.sendOriginHeader", 0);
// 0=never send, 1=send when same-origin only, 2=always send (careful!)
pref("network.http.sendOriginHeader", 1);
// Controls whether referrer attributes in <a>, <img>, <area>, <iframe>, and <link> are honoured
pref("network.http.enablePerElementReferrer", true);