Yep. That's why one of the first things I do when I set up firefox is to go into `about:configs` and change `network.http.referer.XOriginPolicy` to 1.

For context:

0: no restrictions/default

1: only send if base domain matches (i.e. news.ycombinator.com would only include the referrer for *.ycombinator.com links)

2: only send if entire domain matches (i.e. news.ycombinator.com would only include the referrer for news.ycombinator.com links)

I use an extension to always send the base domain of the target as the "Referer" and have not encountered any problems (or at least not any that I cared enough to investigate the cause for). It's absurd that Firefox still has this privacy leak by default considering how much they present themselves as privacy friendly.

Firefox some time recently cracked down on unnecessary referrers but they are still fairly conservative about it because it breaks some sites and if you are too aggressive about it then you end up with users assuming that's firefox not working properly.

Not since FF 87.