Occasionally, I found that lynx sends referer field pointing out
to local files, including temporary files, which may be not good
because of privacy and security reasons (and we guess how remote user
may found temp file name generated by lynx). I think the referer: field
should not be sent if previous page was not http://

One example: press 'l' to see "links list page"
and try to follow some link. (I made a trace log from dev.18
but seem this area was not changed for a while):


                Lynx Trace Log (2.8.3dev.18)

User message: Trace ON!

LYpush[3]: address:file://localhost/tmp/L8518-9813TMP.html
        title:List Page
getfile: getting http://lib.ru/SKI/Mirrors
...
Writing:
GET http://lib.ru/SKI/Mirrors HTTP/1.0
Host: lib.ru
Accept: text/html, text/plain, text/sgml, */*;q=0.01
Accept-Encoding: gzip, compress
Accept-Language: en,ru
Accept-Charset: windows-1251, *;q=0.5, iso-8859-1;q=0.01, us-ascii;q=0.01
Pragma: no-cache
Cache-Control: no-cache
User-Agent: Lynx/2.8.3dev.18 libwww-FM/2.14
Referer: file://localhost/tmp/L8518-9813TMP.html

----------------------------------
Sending HTTP request.



Reply via email to