referrer-policy-cross-origin-redirect.php

<?php
header("Referrer-Policy: origin-when-cross-origin");
?>
<!DOCTYPE html>
<head>
  <script src="/resources/testharness.js"></script>
  <script src="/resources/testharnessreport.js"></script>
  <script src="/resources/get-host-info.js"></script>
</head>
<body>
</body>
<script>
    // Tests that once a referrer has been stripped while following one leg of a redirected request, the referrer doesn't get reconstructed on subsequent legs.
    async_test(function () {
        var test = this;
        fetch(get_host_info().AUTHENTICATED_ORIGIN + "/security/referrerPolicyHeader/resources/redirect-to.php?location=" + document.location.origin + "/security/referrerPolicyHeader/resources/referrer-and-host.php").then(test.step_func(function(response) {
            response.json().then(test.step_func(function (result) {
                // Sanity check that the request redirect back to the same origin as this page.
                assert_equals(result.host, document.location.host);
                // The origin should have been stripped because the initial leg of the request was cross-origin.
                assert_equals(document.location.origin + "/", result.referrer);
                test.done();
            }));
        }));
    });
</script>
</html>

chromium/third_party/blink/web_tests/http/tests/security/referrerPolicyHeader/referrer-policy-cross-origin-redirect.php