CyberCertPrepSecurity FundamentalsWeb Security BasicsEASYFree question
Which HTTP header can leak the full URL of the referring page, potentially exposing sensitive information in query parameters?
- A.A. Content-Type
- B.D. Host
- C.C. Accept
- D.B. Referer (Referrer)
Why D is correct
The Referer header sends the full URL of the page that linked to the current request. If the URL contains sensitive data (session tokens, search queries, personal info), it leaks to the destination. Referrer-Policy header controls this: 'no-referrer' or 'strict-origin-when-cross-origin' limits exposure.
Know someone studying for Security Fundamentals? Send them this one.