Dear Google,

I was building an AngularJS application that needed to collect the referrer name and I had a form with the name attribute referrer and my document.referrer changed to the form DOM element. Document.referrer should not be manipulated, it's a read-only attribute. This is both a security issue for manipulating the dom, CORS, etc and more importantly a functionality issue as document.referrer is used in many sdks,such as mixpanel (I reported this bug to them as well as it breaks their sdk). 

REPRODUCTION CASE
See this gist and jsbin: https://gist.github.com/evanjmg/4ab1fc961b53bdd67f275231a73365fa, https://jsbin.com/quyede

Chrome Version 55.0.2883.95 (64-bit)
Operating System: Macbook Pro - MacBookPro11,4 - OS X El Capitan  - Mid 2015, 15inch

Please follow up with me and let me know if you have any questions. Hope you'll get this patched up soon.

Best,
Evan Gillogley
Web Developer at Velocity
evan.gillogley@velocityapp.com
+447481235882
github: @evanjmg