5. Subresources
Image below is requested from /img — its Referer appears in the console and /log, not here:
fetch() with explicit referrerPolicy — result shows what the server received:
(fetch results appear here)
Each test below reaches /inspect (or /img), which echoes exactly what your browser sent.
Watch the server console (wrangler tail) or open /log for a rolling list.
Current: strict-origin-when-cross-origin
Pick a policy; the page reloads with that Referrer-Policy response header, then re-run the tests:
no-referrer no-referrer-when-downgrade origin origin-when-cross-origin same-origin strict-origin strict-origin-when-cross-origin unsafe-url
Meta refresh page (waits 2s, then refreshes into /inspect)
Image below is requested from /img — its Referer appears in the console and /log, not here:
fetch() with explicit referrerPolicy — result shows what the server received:
(fetch results appear here)