Nutter Tools
Nutter Tools

A free toolbox that runs in your browser. A tool for every job.

Your files never leave your device

Images

  • Convert images
  • Compress images
  • Resize images
  • Crop
  • Watermark

PDF & files

  • Merge PDFs
  • Split a PDF
  • Images to PDF
  • PDF to images
  • Remove photo location

Video & audio

  • Compress video
  • Convert video
  • Video to GIF
  • Convert audio
  • Trim audio

Everyday

  • QR codes
  • Passwords
  • Time zones
  • Unit converter
  • Word count
  • Webcam test

Developer

  • JSON formatter
  • Base64
  • Regex tester
  • Hashes
  • JWT decoder

Site

  • About
  • Contact
  • Settings
  • Privacy
  • Terms
  • Site map
  • llms.txt

Everyday

  • Images
  • Video
  • Audio
  • PDF & files
  • Text
  • QR codes
  • Units & math
  • Time & dates
  • Color
  • Passwords & IDs
  • Device tests
  • Sun & moon

For developers

  • JSON
  • Encoding
  • Regex & cron
  • Web & auth
  • Hashing & encryption
  • Config files
  • Network
  • Browser
  • AI
  • Fake data
© Nutter Toolsnutter.tools
  1. Home
  2. Web & auth
  3. Referrer policy checker
Your files stay on your device

Referrer policy checker

Paste a Referrer-Policy header and a meta referrer tag and see which one wins, with the trade-off of each policy value spelled out.

This tool is in beta

Still being tested. If a result looks wrong, tell us.

Report a problem

Referrer-Policy header

6 of 4,096 characters

Meta referrer tag

44 of 20,000 characters

Precedence here follows the standards rather than the common folklore: the browser processes the meta element before the Referrer-Policy header, so a valid meta tag wins, an invalid one is skipped, and inside a channel the last understood value applies. That last rule is why comma lists like "unsafe-url, no-referrer" exist, older browsers take the first value they know and newer ones take the last. What this checker does not do is fetch anything or judge whether your choice suits your site; the trade-off notes under each value are the whole of that advice.

Inputs

More settings▾

Accepted policy values, all case-insensitive: no-referrer, no-referrer-when-downgrade, same-origin, origin, strict-origin, origin-when-cross-origin, strict-origin-when-cross-origin, unsafe-url.

Paste-only by design: browsers cannot read another site's response headers, so the header value comes from your server config, curl -sI, or a DevTools network pane. The meta input takes the tag itself or the whole page head.

More web & auth tools

  • HTTP header parser
  • CSP evaluator & builder
All web & auth tools

Was this tool useful?