Enum rocket_contrib::helmet::Referrer

pub enum Referrer {
    NoReferrer,
    NoReferrerWhenDowngrade,
    Origin,
    OriginWhenCrossOrigin,
    SameOrigin,
    StrictOrigin,
    StrictOriginWhenCrossOrigin,
    UnsafeUrl,
}

The Referrer-Policy header: controls the value set by the browser for the Referer header.

Tells the browser if it should send all or part of URL of the current page to the next site the user navigates to via the Referer header. This can be important for security as the URL itself might expose sensitive data, such as a hidden file path or personal identifier.

Variants

NoReferrer

Omits the Referer header (SpaceHelmet default).

NoReferrerWhenDowngrade

Omits the Referer header on connection downgrade i.e. following HTTP link from HTTPS site (Browser default).

Origin

Only send the origin of part of the URL, e.g. the origin of https://foo.com/bob.html is https://foo.com

OriginWhenCrossOrigin

Send full URL for same-origin requests, only send origin part when replying to cross-origin requests.

SameOrigin

Send full URL for same-origin requests only.

StrictOrigin

Only send origin part of URL, only send if protocol security level remains the same e.g. HTTPS to HTTPS.

StrictOriginWhenCrossOrigin

Send full URL for same-origin requests. For cross-origin requests, only send origin part of URL if protocl security level remains the same e.g. HTTPS to HTTPS.

UnsafeUrl

Send full URL for same-origin or cross-origin requests. This will leak the full URL of TLS protected resources to insecure origins. Use with caution.

Trait Implementations

impl Default for Referrer

Defaults to Referrer::NoReferrer. Tells the browser to omit the Referer header.

fn default() -> Referrer

Returns the "default value" for a type.

impl<'h, 'a> Into<Header<'h>> for &'a Referrer

fn into(self) -> Header<'h>

Performs the conversion.

impl Policy for Referrer

const NAME: &'static str

The actual name of the HTTP header.

fn header(&self) -> Header<'static>

Returns the Header to attach to all outgoing responses.