cnst
cnst

Reputation: 27228

Can you at least get the domain of the https referer?

I've noticed that if a foreign https: site links to my non-https site, that I don't get anything in the HTTP Referer header at all. I've experienced this with access.log, but I presume the same happens with JavaScript's document.referrer, too.

So, if the referrer is https, is there no way to get any information about it? Not even the hostname / domain name? Or is it possible to somehow get at least the domain, with JavaScript?

Also, I presume running my own site with https isn't going to solve this issue for me, correct?

Upvotes: 2

Views: 9228

Answers (2)

RUDRA PRATAP DALAI
RUDRA PRATAP DALAI

Reputation: 31

To get the document.referrer, You can use either of the options below:

  1. You Need to convert your HTTP site to HTTPS.

  2. Or you can add the below simple meta tag in your HTTPS site.

    <meta name="referrer" content="always">

Upvotes: 1

RelevantUsername
RelevantUsername

Reputation: 1340

You should check this answer : Get referrer URL - visitors coming from Paypal (HTTPS)


In case your site uses HTTP (not HTTPS) and the referer uses HTTPS, there is no Referrer being sent!

HTTP RFC - 15.1.3 Encoding Sensitive Information in URI's states:

Clients SHOULD NOT include a Referer header field in a (non-secure) HTTP request if the referring page was transferred with a secure protocol.

So the only way to get the Referrer is to use HTTPS on your site.

Upvotes: 5

Related Questions