polybjorn 0376d402b0 fix: use spec-compliant no-referrer meta value (#8725) ...

`never` was removed from the Referrer Policy spec in 2016 and is
only honoured by current browsers as a legacy alias. Replace with
the spec-compliant `no-referrer` token.

Tested:
- Safari 26 (WebKit): Referer suppressed
- LibreWolf 150 (Gecko): Referer suppressed
- Chromium 149 (Blink): Referer suppressed
- SeaMonkey 2.53.23: ignores meta referrer regardless of value
  (pre-existing, unaffected by this change)

Closes https://github.com/FreshRSS/FreshRSS/issues/8718

Co-authored-by: Bjørn A. Andersen <polybjorn@users.noreply.github.com>

2026-04-29 15:20:12 +02:00

4.5 KiB

Raw Blame History

View Raw