Sensitive URL in Referrer Header

Detects pages that expose sensitive parameters (tokens, IDs) in URLs that get leaked via the Referer header to external resources.

zakirkun Updated

File contents

Sensitive URL Referrer Leakage

Overview

When a page loads external resources (images, scripts, analytics) and the page URL contains sensitive parameters (tokens, session IDs), the Referer header sent to external servers exposes these parameters. Password reset tokens and session tokens in URLs are particularly dangerous.

Remediation

  • Never put sensitive tokens in URL query parameters
  • Use Referrer-Policy: no-referrer or strict-origin meta tag/header
  • Use POST requests for sensitive data submission

zakirkun/ice-tea/tree/main/skills/web/referrer-leakage commit 2f85333333

Frequently asked questions

npx skillmds@latest add zakirkun/sensitive-url-in-referrer-header