v135 · miscellaneous

Referrer Policy Simulator

Configure an origin, destination, redirect status code, and Referrer-Policy. See exactly which request headers survive a CORS redirect — what Chrome 135 updates about method preservation, body stripping, and referrer recalculation across origin boundaries.

checking CORS redirect behaviour…

Chrome 135 updates how request headers, body, and referrer policy are handled on CORS redirects. On a 303 redirect, the method changes to GET and the body is stripped. On 301/302 with a POST, the body is also stripped. The Referer header is recalculated based on the active Referrer-Policy — and the policy itself may be downgraded if the redirect crosses origins.

Configure redirect scenario

Origin URL

Redirect target

HTTP method

Redirect status

Referrer-Policy

Request body

Redirect chain

Headers: initial request vs after redirect

Summary

Configure above and click Analyze.