If my web page returns
X-DNS-Prefetch-Control=off, will Chrome do DNS prefetch for links like these?:
<link rel="dns-prefetch" href="http://www.spreadfirefox.com/">
I know Firefox and Chromium respect this header, but I'm not sure if Chrome does as well.
I'm asking because I would like to disable DNS prefetching on certain secure pages on my website to protect against this kind of vulnerability: https://blog.compass-security.com/2016/10/bypassing-content-security-policy-with-dns-prefetching/