---
title: "Discussion on \"Stealing oAuth Token via Referrer Policy Override\" | Hashnode"
description: "Discussion on \"Stealing oAuth Token via Referrer Policy Override\". Explore how referrer leakage can expose OAuth tokens in browser implementations and learn methodologies to protect against token theft"
url: "https://hashnode.com/posts/leaking-oauth-token-via-referrer-leakage/681a735037f3a5e5dc98d8eb"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Stealing oAuth Token via Referrer Policy Override](https://blog.voorivex.team/leaking-oauth-token-via-referrer-leakage?utm_source=hashnode&utm_medium=feed)

Explore how referrer leakage can expose OAuth tokens in browser implementations and learn methodologies to protect against token theft

May 6, 2025 · 4 min read · blog.voorivex.team  
Read the article

-   [#chrome-0day](https://hashnode.com/tag/chrome-0day)
-   [#account-takeover](https://hashnode.com/tag/account-takeover)
-   [#oauth-security](https://hashnode.com/tag/oauth-security)

## Written by

[Voorivex](https://hashnode.com/@Voorivex)

@Voorivex

  
[View profile](https://hashnode.com/@Voorivex)

@yshahinzadeh

I work as an instructor and hunter, leading a small team to grow, learn, and innovate.

## Responses 3

Markdown supported · ⌘↵ to post

[Meiad Noushadi](https://hashnode.com/@meiad)

[May 7, 2025](https://hashnode.com/posts/leaking-oauth-token-via-referrer-leakage/681a735037f3a5e5dc98d8eb/comment/681b88a16c8d7a0ef57390d9)

👍🏻👍🏻👍🏻

[Omid Tabei](https://hashnode.com/@theomidtabei)

[May 6, 2025](https://hashnode.com/posts/leaking-oauth-token-via-referrer-leakage/681a735037f3a5e5dc98d8eb/comment/681a8dff1446bdee17cea2e0)

⭐️⭐️⭐️

[Mouhannad Al-Hmedi](https://hashnode.com/@MouhannadlrX)

[May 6, 2025](https://hashnode.com/posts/leaking-oauth-token-via-referrer-leakage/681a735037f3a5e5dc98d8eb/comment/681a8541528361be095dd712)

thanks for sharing! I'm wondering if this works with other resources requests or just with img?