Editing URL redirection (section)

=== Removing <code>referrer</code> information ===
When a link is clicked, the browser sends along in the [[HTTP request]] a field called [[HTTP referer|referer]] which indicates the source of the link. This field is populated with the URL of the current web page, and will end up in the [[server log|logs]] of the server serving the external link. Since sensitive pages may have sensitive URLs (for example, <code><nowiki>https://company.com/plans-for-the-next-release-of-our-product</nowiki></code>), it is not desirable for the <code>referrer</code> URL to leave the organization. A redirection page that performs [[Referer#Referrer hiding|referrer hiding]] could be embedded in all external URLs, transforming for example <code><nowiki>https://externalsite.com/page</nowiki></code> into <code><nowiki>https://redirect.company.com/https://externalsite.com/page</nowiki></code>. This technique also eliminates other potentially sensitive information from the referrer URL, such as the [[session ID]], and can reduce the chance of [[phishing]] by indicating to the end user that they passed a clear gateway to another site.