admin管理员组

文章数量:1323348

I've noticed that if a foreign https: site links to my non-https site, that I don't get anything in the HTTP Referer header at all. I've experienced this with access.log, but I presume the same happens with JavaScript's document.referrer, too.

So, if the referrer is https, is there no way to get any information about it? Not even the hostname / domain name? Or is it possible to somehow get at least the domain, with JavaScript?

Also, I presume running my own site with https isn't going to solve this issue for me, correct?

I've noticed that if a foreign https: site links to my non-https site, that I don't get anything in the HTTP Referer header at all. I've experienced this with access.log, but I presume the same happens with JavaScript's document.referrer, too.

So, if the referrer is https, is there no way to get any information about it? Not even the hostname / domain name? Or is it possible to somehow get at least the domain, with JavaScript?

Also, I presume running my own site with https isn't going to solve this issue for me, correct?

Share Improve this question asked May 14, 2013 at 19:44 cnstcnst 27.3k7 gold badges100 silver badges130 bronze badges 1
  • check this webmasters.stackexchange./questions/47405/… – user1914292 Commented May 14, 2013 at 19:48
Add a ment  | 

2 Answers 2

Reset to default 5

You should check this answer : Get referrer URL - visitors ing from Paypal (HTTPS)


In case your site uses HTTP (not HTTPS) and the referer uses HTTPS, there is no Referrer being sent!

HTTP RFC - 15.1.3 Encoding Sensitive Information in URI's states:

Clients SHOULD NOT include a Referer header field in a (non-secure) HTTP request if the referring page was transferred with a secure protocol.

So the only way to get the Referrer is to use HTTPS on your site.

To get the document.referrer, You can use either of the options below:

  1. You Need to convert your HTTP site to HTTPS.

  2. Or you can add the below simple meta tag in your HTTPS site.

    <meta name="referrer" content="always">

本文标签: javascriptCan you at least get the domain of the https refererStack Overflow