The origin-when-cross-origin value for SVG specifies a request’s full referrerURL is sent as referrer information when making same-origin-referrer requests, and only the ASCII serialization of the origin of the request’s referrerURL is sent as referrer information when making cross-origin-referrer requests.

origin-when-cross-origin

• empty-string
• no-referrer
• no-referrer-when-downgrade
• origin
• same-origin
• strict-origin
• strict-origin-when-cross-origin
• unsafe-url

• World Wide Web Consortium (W3C)