Is it possible to remove referrer when using iframe?
here the case:
I have a page at http://www.mywebsite.com with an <iframe>
in it. Like this:
<html>
<head>...</head>
<body>
...
<a href="#loadiframe">SHow Website</a>
<iframe id="#loadiframe" src="http://www.iframetarget.tld">
...
</body>
</html>
i want to iframetarget.tld not contains referrer/can not see if mywebsite.com is loading their pages.
is that possible?
Note: iframe will load using jQuery lightbox/colorbox
None of these answers worked for me, but I came across this on MDN stating that setting the referrerpolicy
to no-referrer
would accomplish this.
Example:
<iframe src="https://www.whatismyreferer.com/" referrerpolicy="no-referrer"></iframe>
<iframe id="#loadiframe" src='javascript:window.location.replace("http://www.iframetarget.tld")'>
It works.
Using an iframe with a javascript location redirect works:
<iframe style="display:none" src="javascript:parent.location.replace('http://www.whatismyreferer.com/'+(parent.location.hash||''))">
Note that on some browsers when using HTTP, the last referrer will always be sent, which will be domain owning the iframe. Using HTTPS (and a valid certificate) ensures a hidden referrer on all browsers tested.