---
title: "Important: #83768 - Remove referrer check"
manual: "TYPO3 Core Changelog"
version: "main"
permalink: "https://docs.typo3.org/permalink/changelog:important-83768-1668719172"
source: "Changelog/8.7.x/Important-83768-RemoveReferrerCheck.rst"
typo3-version: "8.7.x"
typo3-major: 8
type: "important"
issue: 83768
forge: "https://forge.typo3.org/issues/83768"
tags: ["Backend", "FullyScanned"]
rendered: "2026-09-18T17:00:34+00:00"
---

# Important: #83768 - Remove referrer check {#important-83768-1668719172}

See [forge#83768](https://forge.typo3.org/issues/83768)

## Description {#description}

Browser vendors are considering or have already announced **not** to send the referrer URL/path in HTTP requests when
links are followed or forms are submitted due to privacy reasons. TYPO3 used the referrer as a meagre CSRF protection
for the backend. However, this has been replaced by proper CSRF protection tokens for every backend action and therefore,
the referrer check became obsolete and has been removed.

Usages of the configuration option `[SYS][doNotCheckReferer]` within TYPO3 Core have been removed, as this is not
needed anymore. However, the option can still be set for extensions implementing this option.

## Impact {#impact}

Backend users will not notice any differences.

## Affected Installations {#affected-installations}

All installations are affected.

## Migration {#migration}

TYPO3 extensions that use option `[SYS][doNotCheckReferer]` to implement a kind of CSRF protection, should use
proper CSRF protection tokens provided by the core.