12

Case:

  • site A contains a link that opens site B in new window.
  • The script in site B is trying to get the site A url.

My question: Is there any way to track the referrer of a new window which was opened using target="_blank" or Javascript window.open() function?

If yes then is there any way to completely hide the referrer?

SaschaM78
  • 4,376
  • 4
  • 33
  • 42
ptrinh
  • 121
  • 1
  • 1
  • 3

5 Answers5

9

Referrer is in the HTTP header and so it will be available regardless of whether the window is blank or new. You can get the URL with:

console.log(document.referrer);

There are sites that use this to protect their sites from things like click-jacks, so it would be inappropriate to hide the referrer from the linked page. Browsers that allow for referrer spoofing are considered unsafe, and it tends to be patched when found.

Update

Maybe it's not as frowned upon as I thought. HTML5 has a property for <a> to not send the referrer in the HTTP headers: rel = "noreferrer".

Community
  • 1
  • 1
Anthony
  • 36,459
  • 25
  • 97
  • 163
5

IE with window.open it loses the referer. Simply use jQuery or re-write it without using jQuery:

$("<form />").attr("action", "url").attr("target", "_blank").appendTo(document.body).submit();
Dima
  • 1,045
  • 14
  • 23
  • Works but you might want to also set .attr("method", "GET") explicitly to ensure that the call will be performed using GET as the verb (instead of POST). Just my 2c. – XDS Nov 22 '20 at 10:58
3

If you have control of both pages open the window like so:

var myWindow = window.open('http://my_url', 'title', 'width=500,height=350,top=100,left=100');
if(!myWindow.opener) myWindow.opener = self;

Side note: it's important to give the window a title or IE will poop itself.

In the opened window you'll have a reference to the "opener":

alert(opener.window.location);
tybro0103
  • 48,327
  • 33
  • 144
  • 170
-1

Did you check opener location? It worked for me if I right remember.

Dmitriy R
  • 613
  • 1
  • 5
  • 12
-2

the best way is:

    var myWindow = window.open('', 'title', 'width=500,height=350,top=100,left=100');
myWindow.location.href = 'redirect.asp';

I hope it will be useful

Hernan
  • 404
  • 5
  • 6