[PR #373] [MERGED] [Privacy] Don't send referrer information when clicking links #795

New issue

Closed

opened 2026-02-25 21:36:15 +03:00 by kerem · 0 comments

kerem commented

2026-02-25 21:36:15 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/cypht-org/cypht/pull/373
Author: @t-m-w
Created: 2/11/2020
Status: ✅ Merged
Merged: 2/16/2020
Merged by: @jasonmunro

Base: master ← Head: master

📝 Commits (1)

adc5c54 [Privacy] Don't send referrer information when clicking links

📊 Changes

2 files changed (+2 additions, -1 deletions)

View changed files

📝 modules/core/output_modules.php (+1 -0)
📝 tests/phpunit/modules/core/modules.php (+1 -1)

📄 Description

Pullrequest

This PR adds a meta tag to pages that prevents referrer information from being transmitted in HTTP request headers when you click links, such as links in emails. Sending that information to external sites unnecessarily exposes the full URL of the cypht page you were on, which includes your cypht instance domain/address, message ID, and other IDs which might be usable for unknown nefarious purposes. The URL often looks something like this: https://cypht.example.com/?page=message&uid=12345&list_path=imap_0_1234567890&list_parent=imap_0_1234567890&list_page=1

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/cypht-org/cypht/pull/373 **Author:** [@t-m-w](https://github.com/t-m-w) **Created:** 2/11/2020 **Status:** ✅ Merged **Merged:** 2/16/2020 **Merged by:** [@jasonmunro](https://github.com/jasonmunro) **Base:** `master` ← **Head:** `master` --- ### 📝 Commits (1) - [`adc5c54`](https://github.com/cypht-org/cypht/commit/adc5c5480510db7fc7b33a3445e6e066c03710a3) [Privacy] Don't send referrer information when clicking links ### 📊 Changes **2 files changed** (+2 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `modules/core/output_modules.php` (+1 -0) 📝 `tests/phpunit/modules/core/modules.php` (+1 -1) </details> ### 📄 Description ## Pullrequest This PR adds a meta tag to pages that prevents referrer information from being transmitted in HTTP request headers when you click links, such as links in emails. Sending that information to external sites unnecessarily exposes the full URL of the cypht page you were on, which includes your cypht instance domain/address, message ID, and other IDs which might be usable for unknown nefarious purposes. The URL often looks something like this: `https://cypht.example.com/?page=message&uid=12345&list_path=imap_0_1234567890&list_parent=imap_0_1234567890&list_page=1` --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>