Imagine opening this page on a slow phone connection. The media should still be worth the wait and have a sensible fallback.
What You Need to Know
Referrerpolicy can reduce how much information about your page is sent when an iframe loads an external site. It does not stop the external provider from receiving the embed request itself.
Try the Example
Take a look at the example. We’ll explain the important lines right below it.
<iframe src="/embeds/map.html" title="Location map"
referrerpolicy="no-referrer" loading="lazy"></iframe>Let’s Read the Code
- <iframe>: An iframe embeds a separate document with its own URL and security context.
- src: Src identifies a resource path for images, frames, or media.
- referrerpolicy: Referrerpolicy controls how much referrer information accompanies a request.
Read the named elements and attributes together. They explain how the browser connects this feature to the rest of the page.
What Happens in the Browser?
The paths shown here refer to files in your own example project. Put real images and recordings in those locations before expecting them to load.
Remember the boundary. Embedded content may be a separate document, sometimes provided by another company. Give it a readable title or alternative, and check what permissions and information its request may expose.
Your Turn
Try changing one file path or attribute. Notice whether the browser falls back to another source or shows missing content.
Common Beginner Mistakes
- Leaving out real media files or understandable text alternatives.
- Media and remote embeds can use significant bandwidth or reveal a visitor’s network information to another provider.
Key Takeaways
- Referrerpolicy can reduce how much information about your page is sent when an iframe loads an external site.
- <iframe>: An iframe embeds a separate document with its own URL and security context.
- Treat personal information carefully. The HTML example cannot replace HTTPS, server-side security checks, or safe storage.