[wp-trac] [WordPress Trac] #43285: The default admin referrer policy header value block the access to media on other server in admin panel

[WordPress Trac]

#43285: The default admin referrer policy header value block the access to media on
other server in admin panel
----------------------------------------+-----------------------------
 Reporter:  qcmiao                      |       Owner:
     Type:  enhancement                 |      Status:  new
 Priority:  normal                      |   Milestone:  5.0
Component:  Media                       |     Version:  4.9
 Severity:  normal                      |  Resolution:
 Keywords:  needs-patch good-first-bug  |     Focuses:  administration
----------------------------------------+-----------------------------
Changes (by johnbillion):

 * keywords:   => needs-patch good-first-bug
 * type:  defect (bug) => enhancement
 * milestone:  Awaiting Review => 5.0


Comment:

 Thanks for the ticket @qcmiao and welcome to WordPress Trca.

 Attempting to protect your media files by way of the referer header is not
 a good idea, however your recommendation to switch to `strict-origin-when-
 cross-origin` does make sense. I think it's the most appropriate referrer
 policy to use.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/43285#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform