Why did browser authors not make 127.0.0.1/localhost-hosted webpages skip the referrer?

For a long time, I was so convinced that 127.0.0.1/localhost-hosted webpages, that is, with URLs such as:

http://127.0.0.1/MySecretControlPanel/sensitive.php?stuff=goes&here=dude

… did not send the “HTTP referrer” header when you … Continue reading Why did browser authors not make 127.0.0.1/localhost-hosted webpages skip the referrer?