Links that don't pass referrer

Question

I want to create a list of links opening the targets in new tabs from my private page and I don't want the referring URL to be passed on. I tried the following method, but it didn't solve the problem:

<script>
function op(url){
  window.open(url.replace(/<(?:.|\n)*?>/gm,''),'_newtab');
}
</script>    
<span onclick="javascript:op(this.innerHTML);">http://www.google.com<span>

Is there any way how to spoof or blank the referrer? In the worst case I might create an iframe and put the page with links on some free hosting, but I'd prefer some more elegant solution. The only requirements are tha t it should work in Chrome, Opera, IE and FF (2011+ versions), accessibility is not an issue, since it'll be used by very few users I know.

As long as you are not being a _naughty_ web developer, you shouldn't need to turn it off... — Alex Wayne, Nov 21 '12 at 18:27
@AlexWayne not true. Protecting user's privacy (aka, hiding where they are referred from) isn't naughty at all. For example, a google doc accesses by private URL shouldn't pass the private URL to any page linked to within that doc. — scosman, Mar 10 '15 at 15:56

score 1 · Answer 1 · answered Nov 21 '12 at 18:23

1

The referring URL is part of the HTTP protocol, not the mark-up. You can't change this.

Also, you never need to specify javascript: in an event handler. It's always is and can only be javascript.

answered Nov 21 '12 at 18:23

Diodeus - James MacFarlane

110,221
32
151
174

score 0 · Answer 2 · edited May 23 '17 at 11:59

0

There is a rel="noreferrer" which is not yet suported by Firefox...

See also https://stackoverflow.com/a/8957778/22470

edited May 23 '17 at 11:59

Community

1
1

answered Nov 21 '12 at 18:26

powtac

39,317
26
112
166

score 0 · Answer 3 · answered Nov 21 '12 at 18:26

0

Create a tiny app on Heroku that receives a URL then forwards the user.

answered Nov 21 '12 at 18:26

Christian

19,349
3
53
70

score 0 · Answer 4 · answered Nov 21 '12 at 18:27

0

You could redirect to an intermediate page that redirects to the final website, this would hide the true referer.

answered Nov 21 '12 at 18:27

jeremy

4,309
3
20
36

score 0 · Accepted Answer · answered Nov 24 '12 at 16:06

0

It seems the easiest is the iframe dirty way.

answered Nov 24 '12 at 16:06

user965748

2,009
4
20
29

Links that don't pass referrer

5 Answers5