In the current implementation, FetchClientSettingsObjectSnapshot's referrer policy is used for worklets module loading, but this is wrong. The spec requires to use ScriptFetchOptions' referrer policy that defaults to the empty string (i.e., the default referrer policy) for worklets.
// The "fetch a module worker script graph" algorithm:
"2. Let options be a script fetch options whose cryptographic nonce is the
empty string, ..., and referrer policy is the empty string."
https://html.spec.whatwg.org/multipage/webappapis.html#fetch-a-module-worker-script-tree
Comment 1 by bugdroid1@chromium.org
, Jun 25 2018