/testing/web-platform/meta/referrer-policy/unsafe-url/attr-referrer/
../
cross-origin
same-origin