101264 2012-11-05 15:01:25 -0800 document.open should set the outgoing Referer 2013-04-04 17:02:34 -0700 1 1 1 Unclassified WebKit DOM 528+ (Nightly build) Unspecified Unspecified UNCONFIRMED P2 Normal --- 0 bradavogel webkit-unassigned abarth ap bradavogel wiebe oldest_to_newest 758935 0 172412 bradavogel 2012-11-05 15:01:25 -0800 Created attachment 172412 repro case Browsers tested: Chrome Canary 25.0.1317.0 - FAIL Webkit Nightly 6.0.2 (7536.26.17, 537+) - FAIL Firefox 16.0.2 - PASS Repro steps: 1) Run the attached test.html with the web inspector open. 2) Click the Network tab and click icon-gold.png. Expected: The HTTP REFERER header is sent when requesting the image. Actual: Notice that the HTTP REFERER header isn't sent when requesting the image. This is because the iframe doesn't have a 'src' attribute. However, the iframe is created and written into by the parent page, so it should send the parent page's REFERER. This breaks sites that need to use a local iframe to sandbox css styles, and that iframe also loads external content that relies on HTTP REFERER. 760084 1 abarth 2012-11-06 14:57:15 -0800 What is a "local" iframe? 760096 2 abarth 2012-11-06 15:10:46 -0800 I thought I checked all these cases and made us match Firefox, but it sounds like I missed this one. Thanks for the report. 760112 3 bradavogel 2012-11-06 15:28:08 -0800 "Local iframe": an empty iframe without the 'src' attribute. E.g.: <iframe></iframe> <script> var iframe = document.querySelector('iframe'); iframe.open(); iframe.write('content'); iframe.close(); </script> 794753 4 wiebe 2012-12-19 09:42:41 -0800 I can confirm that IE 9 and 10 also set the HTTP Referer header properly in this use case. This is a particular problem for anyone using the WordPress Theme Customizer (which uses a src-less, dynamic iframe) in conjunction with any authenticated requests that rely on the Referer (eg Typekit) inside that iframe. 869468 5 bradavogel 2013-04-04 17:02:34 -0700 Cross filed for Blink at https://code.google.com/p/chromium/issues/detail?id=226858 172412 2012-11-05 15:01:25 -0800 2012-11-05 15:01:25 -0800 repro case test.html text/html 447 bradavogel PCFET0NUWVBFIGh0bWw+CjxodG1sPgogICAgPGhlYWQ+CiAgICAgICAgPHNjcmlwdD4KICAgICAg ICAgICAgd2luZG93Lm9ubG9hZCA9IGZ1bmN0aW9uKCl7CiAgICAgICAgICAgICAgICB2YXIgaWZy YW1lID0gZG9jdW1lbnQucXVlcnlTZWxlY3RvcignaWZyYW1lJyk7CiAgICAgICAgICAgICAgICB2 YXIgZG9jID0gaWZyYW1lLmNvbnRlbnREb2N1bWVudDsKICAgICAgICAgICAgICAgIGRvYy5vcGVu KCk7CiAgICAgICAgICAgICAgICBkb2Mud3JpdGUoJzxpbWcgc3JjPSJodHRwOi8vd3d3LndlYmtp dC5vcmcvaW1hZ2VzL2ljb24tZ29sZC5wbmciPicpOwogICAgICAgICAgICAgICAgZG9jLmNsb3Nl KCk7CiAgICAgICAgICAgIH0KICAgICAgICA8L3NjcmlwdD4KICAgIDwvaGVhZD4KICAgIDxib2R5 PgogICAgICAgIDxpZnJhbWU+PC9pZnJhbWU+CiAgICA8L2JvZHk+CjwvaHRtbD4K