No protected referer for JS (document.referrer)

The README says:

Automatically hide HTTP and JavaScript Referer for cross-domain requests!

but the Javascript Referer (document.referrer) isn't changed.

STR

  • New FF profile
  • Install SR
  • OFF: default-whitelist
  • ON: strict-mode
  • Open your favorite search engine and search for browserleaks ip
  • Click on the https://browserleaks.com/ip link
  • HTTP Headers: Referer: https://browserleaks.com/ip (Protected by SR)
  • Go back to your search engine and search for browserleaks javascript
  • Click on the https://browserleaks.com/javascript link
  • Document Object: Document Referrer: https://duckduckgo.com/ (NOT Protected)

BTW: The on about:addons rendered home page is still GH: https://gitlab.com/smart-referer/smart-referer/blob/30aac4bfefc669d0fe4b710cc930f2a749685348/manifest.json#L9