Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make cross-site condition more explicit #15

Open
martinthomson opened this issue Oct 13, 2021 · 1 comment
Open

Make cross-site condition more explicit #15

martinthomson opened this issue Oct 13, 2021 · 1 comment

Comments

@martinthomson
Copy link

The document isn't especially crisp in how it treats same-site and cross-site navigations differently.

There are a few ways in which this lack of clarity manifests. The login example of https://example.com/login?returnto=item/12345 is one. This strongly implies that the link origin and return destination is https://example.com/item/12345. If we don't care about tracking across same-site navigations that might be OK on the basis that the information is kept within the same site.

However, the lead-in to that example might be read to imply that we are only interested in the cross-site scenario. That means that the "item/12345" refers to something else, either drawing from Referer or something implicit. If the link was followed from another site (https://other.example/item/12345 say) then we might have navigation tracking. We might also have navigation tracking on the return link, but that's probably separable and covered by other examples.

@johannhof
Copy link
Member

I suggested adding this example but in hindsight you're right that this specific case would always happen in a same-site scenario. We can remove it, but then I agree the spec should clarify whether "link decoration" by definition is only observed on cross-site navigations.

(In my opinion it should, since in a same-site scenario there are other ways of transferring/storing this information, such as in a cookie).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants