wiki: revisist smart referer recommendation

the wiki mentions smart referer as a potential alternative to 1601 in case of breakage, and it also includes a couple tweaks (whitelist and strict mode).

however one of the default settings of SR is rewrite mode, quoting the readme of the project:

Rewrite Mode: Can be used to change what is sent to the server instead of the original referer header. The default (Send the URL you’re going to as referer) is known to cause the least issues on most sites and is therefore recommended.

this means that out of the box SR is spoofing referers which is not a good idea for security, and in fact it’s enforced false using 6002.

the wiki should recommend changing rewrite mode to “Send nothing”.

[Thorin-Oakenpants]

Here’s hoping uBO adds this - https://github.com/uBlockOrigin/uBlock-issues/issues/1663#issuecomment-1192832027 - then users can block by default but allow per eTLD+1. No Spoofing or affecting of CSRF. This is honestly the only way to do it IMO - simple on/off - I personally don’t think we need any of the complexity of origin vs destination

And it would be one less extension for those who use Smart Referrer. Most users wouldn’t want to disable all cross-site referers as per our default, it breaks too many platforms and properties. It’s fine for me, but I’m also happy to use uBO to break most 3rd party anyway.

The referrer pref 1601 is probably the biggest pref users have an issue with. If uBO added a block/enable per-site scope for this, then we could make that pref inactive, and just add a referer note to the uBO setup instructions

[Thorin-Oakenpants]

but that doesn’t mean we can’t limit the damage, but we also don’t need to complicate things

Smart Referer … and it’s probably too complicated with origin-source combos

referers aren’t really the issue, it’s the IP … but that doesn’t mean we can’t limit the damage, but we also don’t need to complicate things

All I want is

• send nothing by default
• whitelist sites (eTLD+1 + scheme) to unbreak shit for user’s super regular sites
• anything else is up to the user and I don’t have to explain it or add reams of stuff tot he wiki

What I don’t want

• micro management