[FYI] Spoofing Referrer headers in uMatrix

[Atavic]

referrer-spoofing is explained in the Wiki. In the last sentence:

[...] the referrer will be spoofed using the http://www.example.com/ string.

The referrer here is also stripped down to the minimum for a correctly working and privacy-aware browsing.

@fmarier's post Tweaking Referrers For Privacy in Firefox goes indepth about the Referer header.

A more secure option is to strip cross-origin referrers and leave same-origin referrers alone.

arkenfox/user.js#5 (comment)

[gorhill]

After reading the blog post, it does seem to me that uMatrix could treat non-GET requests differently for referrer-spoofing purpose: remove the Referer header instead of spoofing it -- keeping in mind that uMatrix spoof the referrer only when it is 3rd-party to the navigated-from site, so the referrer header would not be removed if it is 1st-party.

[Atavic]

Optimal choice.