Referer https security and history manipulation

[Tom741]

Hello everyone,
I have 2 questions, not really related but anyway .

First one is : I would like to know where I can find the code that handle the security about when we are to a https website and we navigate to an http one, the referer is deleted ?

Second one : is there any way to manipulate the history of the browser ? Like adding manualy an url in the history ?

Thanks,

[magreenblatt]

I would like to know where I can find the code that handle the security about when we are to a https website and we navigate to an http one, the referer is deleted ?

You can ask the security-dev list: https://groups.google.com/a/chromium.or ... curity-dev

is there any way to manipulate the history of the browser ? Like adding manualy an url in the history ?

Yes, see https://developer.mozilla.org/en-US/doc ... er_history.

[Tom741]

Hello, sorry about the delay .
I'll ask the question to the security dev list.
I would have prefer to manipulate the history directly in C++, but I was not aware of the html 5 history push/replace state, looks interesting too.

Thanks,