diff --git a/dom/base/nsDocument.cpp b/dom/base/nsDocument.cpp
index 09146b2fe2..079aa0fdae 100644
--- a/dom/base/nsDocument.cpp
+++ b/dom/base/nsDocument.cpp
@@ -2424,16 +2424,6 @@ nsDocument::ApplySettingsFromCSP(bool aSpeculative)
     rv = NodePrincipal()->GetCsp(getter_AddRefs(csp));
     NS_ENSURE_SUCCESS_VOID(rv);
     if (csp) {
-      // Set up any Referrer Policy specified by CSP
-      bool hasReferrerPolicy = false;
-      uint32_t referrerPolicy = mozilla::net::RP_Default;
-      rv = csp->GetReferrerPolicy(&referrerPolicy, &hasReferrerPolicy);
-      NS_ENSURE_SUCCESS_VOID(rv);
-      if (hasReferrerPolicy) {
-        mReferrerPolicy = static_cast<ReferrerPolicy>(referrerPolicy);
-        mReferrerPolicySet = true;
-      }
-
       // Set up 'block-all-mixed-content' if not already inherited
       // from the parent context or set by any other CSP.
       if (!mBlockAllMixedContent) {
diff --git a/dom/interfaces/security/nsIContentSecurityPolicy.idl b/dom/interfaces/security/nsIContentSecurityPolicy.idl
index 191ddb6e4b..40d48f8820 100644
--- a/dom/interfaces/security/nsIContentSecurityPolicy.idl
+++ b/dom/interfaces/security/nsIContentSecurityPolicy.idl
@@ -52,18 +52,17 @@ interface nsIContentSecurityPolicy : nsISerializable
   const unsigned short REFLECTED_XSS_DIRECTIVE        = 12;
   const unsigned short BASE_URI_DIRECTIVE             = 13;
   const unsigned short FORM_ACTION_DIRECTIVE          = 14;
-  const unsigned short REFERRER_DIRECTIVE             = 15;
-  const unsigned short WEB_MANIFEST_SRC_DIRECTIVE     = 16;
-  const unsigned short UPGRADE_IF_INSECURE_DIRECTIVE  = 17;
-  const unsigned short CHILD_SRC_DIRECTIVE            = 18;
-  const unsigned short BLOCK_ALL_MIXED_CONTENT        = 19;
-  const unsigned short REQUIRE_SRI_FOR                = 20;
-  const unsigned short SANDBOX_DIRECTIVE              = 21;
-  const unsigned short WORKER_SRC_DIRECTIVE           = 22;
-  const unsigned short SCRIPT_SRC_ELEM_DIRECTIVE      = 23;
-  const unsigned short SCRIPT_SRC_ATTR_DIRECTIVE      = 24;
-  const unsigned short STYLE_SRC_ELEM_DIRECTIVE       = 25;
-  const unsigned short STYLE_SRC_ATTR_DIRECTIVE       = 26;
+  const unsigned short WEB_MANIFEST_SRC_DIRECTIVE     = 15;
+  const unsigned short UPGRADE_IF_INSECURE_DIRECTIVE  = 16;
+  const unsigned short CHILD_SRC_DIRECTIVE            = 17;
+  const unsigned short BLOCK_ALL_MIXED_CONTENT        = 18;
+  const unsigned short REQUIRE_SRI_FOR                = 19;
+  const unsigned short SANDBOX_DIRECTIVE              = 20;
+  const unsigned short WORKER_SRC_DIRECTIVE           = 21;
+  const unsigned short SCRIPT_SRC_ELEM_DIRECTIVE      = 22;
+  const unsigned short SCRIPT_SRC_ATTR_DIRECTIVE      = 23;
+  const unsigned short STYLE_SRC_ELEM_DIRECTIVE       = 24;
+  const unsigned short STYLE_SRC_ATTR_DIRECTIVE       = 25;
 
   /**
    * Accessor method for a read-only string version of the policy at a given
@@ -105,21 +104,6 @@ interface nsIContentSecurityPolicy : nsISerializable
    */
   readonly attribute bool enforcesFrameAncestors;
 
-  /**
-   * Obtains the referrer policy (as integer) for this browsing context as
-   * specified in CSP.  If there are multiple policies and...
-   *  - only one sets a referrer policy: that policy is returned
-   *  - more than one sets different referrer policies: no-referrer is returned
-   *  - more than one set equivalent policies: that policy is returned
-   * For the enumeration of policies see ReferrerPolicy.h and nsIHttpChannel.
-   *
-   * @param aPolicy
-   *        The referrer policy to use for the protected resource.
-   * @return
-   *        true if a referrer policy is specified, false if it's unspecified.
-   */
-  bool getReferrerPolicy(out unsigned long policy);
-
   /**
    * Parse and install a CSP policy.
    * @param aPolicy
diff --git a/dom/security/nsCSPContext.cpp b/dom/security/nsCSPContext.cpp
index ad9b33bb2e..9a6fa568e2 100644
--- a/dom/security/nsCSPContext.cpp
+++ b/dom/security/nsCSPContext.cpp
@@ -398,48 +398,6 @@ nsCSPContext::GetEnforcesFrameAncestors(bool *outEnforcesFrameAncestors)
   return NS_OK;
 }
 
-NS_IMETHODIMP
-nsCSPContext::GetReferrerPolicy(uint32_t* outPolicy, bool* outIsSet)
-{
-  *outIsSet = false;
-  *outPolicy = mozilla::net::RP_Default;
-  nsAutoString refpol;
-  mozilla::net::ReferrerPolicy previousPolicy = mozilla::net::RP_Default;
-  for (uint32_t i = 0; i < mPolicies.Length(); i++) {
-    mPolicies[i]->getReferrerPolicy(refpol);
-    // only set the referrer policy if not delievered through a CSPRO and
-    // note that and an empty string in refpol means it wasn't set
-    // (that's the default in nsCSPPolicy).
-    if (!mPolicies[i]->getReportOnlyFlag() && !refpol.IsEmpty()) {
-      // Referrer Directive in CSP is no more used and going to be replaced by
-      // Referrer-Policy HTTP header. But we still keep using referrer directive,
-      // and would remove it later.
-      // Referrer Directive specs is not fully compliant with new referrer policy
-      // specs. What we are using here:
-      // - If the value of the referrer directive is invalid, the user agent
-      // should set the referrer policy to no-referrer.
-      // - If there are two policies that specify a referrer policy, then they
-      // must agree or the employed policy is no-referrer.
-      if (!mozilla::net::IsValidReferrerPolicy(refpol)) {
-        *outPolicy = mozilla::net::RP_No_Referrer;
-        *outIsSet = true;
-        return NS_OK;
-      }
-
-      uint32_t currentPolicy = mozilla::net::ReferrerPolicyFromString(refpol);
-      if (*outIsSet && previousPolicy != currentPolicy) {
-        *outPolicy = mozilla::net::RP_No_Referrer;
-        return NS_OK;
-      }
-
-      *outPolicy = currentPolicy;
-      *outIsSet = true;
-    }
-  }
-
-  return NS_OK;
-}
-
 NS_IMETHODIMP
 nsCSPContext::AppendPolicy(const nsAString& aPolicyString,
                            bool aReportOnly,
diff --git a/dom/security/nsCSPParser.cpp b/dom/security/nsCSPParser.cpp
index 85bee16527..faf5edb2c4 100644
--- a/dom/security/nsCSPParser.cpp
+++ b/dom/security/nsCSPParser.cpp
@@ -17,7 +17,6 @@
 #include "nsReadableUtils.h"
 #include "nsServiceManagerUtils.h"
 #include "nsUnicharUtils.h"
-#include "mozilla/net/ReferrerPolicy.h"
 
 using namespace mozilla;
 
@@ -826,38 +825,6 @@ nsCSPParser::sourceList(nsTArray<nsCSPBaseSrc*>& outSrcs)
   }
 }
 
-void
-nsCSPParser::referrerDirectiveValue(nsCSPDirective* aDir)
-{
-  // directive-value   = "none" / "none-when-downgrade" / "origin" / "origin-when-cross-origin" / "unsafe-url"
-  // directive name is token 0, we need to examine the remaining tokens (and
-  // there should only be one token in the value).
-  CSPPARSERLOG(("nsCSPParser::referrerDirectiveValue"));
-
-  if (mCurDir.Length() != 2) {
-    CSPPARSERLOG(("Incorrect number of tokens in referrer directive, got %d expected 1",
-                 mCurDir.Length() - 1));
-    delete aDir;
-    return;
-  }
-
-  if (!mozilla::net::IsValidReferrerPolicy(mCurDir[1])) {
-    CSPPARSERLOG(("invalid value for referrer directive: %s",
-                  NS_ConvertUTF16toUTF8(mCurDir[1]).get()));
-    delete aDir;
-    return;
-  }
-
-  //referrer-directive deprecation warning
-  const char16_t* params[] = { mCurDir[1].get() };
-  logWarningErrorToConsole(nsIScriptError::warningFlag, "deprecatedReferrerDirective",
-                             params, ArrayLength(params));
-
-  // the referrer policy is valid, so go ahead and use it.
-  mPolicy->setReferrerPolicy(&mCurDir[1]);
-  mPolicy->addDirective(aDir);
-}
-
 void
 nsCSPParser::requireSRIForDirectiveValue(nsRequireSRIForDirective* aDir)
 {
@@ -1170,13 +1137,6 @@ nsCSPParser::directive()
     return;
   }
 
-  // special case handling of the referrer directive (since it doesn't contain
-  // source lists)
-  if (cspDir->equals(nsIContentSecurityPolicy::REFERRER_DIRECTIVE)) {
-    referrerDirectiveValue(cspDir);
-    return;
-  }
-
   // special case handling for report-uri directive (since it doesn't contain
   // a valid source list but rather actual URIs)
   if (CSP_IsDirective(mCurDir[0], nsIContentSecurityPolicy::REPORT_URI_DIRECTIVE)) {
diff --git a/dom/security/nsCSPUtils.cpp b/dom/security/nsCSPUtils.cpp
index 70418e70c3..a7eeba9027 100644
--- a/dom/security/nsCSPUtils.cpp
+++ b/dom/security/nsCSPUtils.cpp
@@ -1235,7 +1235,7 @@ nsCSPDirective::toDomCSPStruct(mozilla::dom::CSP& outCSP) const
       outCSP.mScript_src_attr.Value() = mozilla::Move(srcs);
       return;
 
-    // REFERRER_DIRECTIVE and REQUIRE_SRI_FOR are handled in nsCSPPolicy::toDomCSPStruct()
+    // REQUIRE_SRI_FOR is handled in nsCSPPolicy::toDomCSPStruct()
 
     default:
       NS_ASSERTION(false, "cannot find directive to convert CSP to JSON");
@@ -1581,14 +1581,7 @@ nsCSPPolicy::toString(nsAString& outStr) const
 {
   uint32_t length = mDirectives.Length();
   for (uint32_t i = 0; i < length; ++i) {
-
-    if (mDirectives[i]->equals(nsIContentSecurityPolicy::REFERRER_DIRECTIVE)) {
-      outStr.AppendASCII(CSP_CSPDirectiveToString(nsIContentSecurityPolicy::REFERRER_DIRECTIVE));
-      outStr.AppendASCII(" ");
-      outStr.Append(mReferrerPolicy);
-    } else {
-      mDirectives[i]->toString(outStr);
-    }
+    mDirectives[i]->toString(outStr);
     if (i != (length - 1)) {
       outStr.AppendASCII("; ");
     }
@@ -1601,14 +1594,7 @@ nsCSPPolicy::toDomCSPStruct(mozilla::dom::CSP& outCSP) const
   outCSP.mReport_only = mReportOnly;
 
   for (uint32_t i = 0; i < mDirectives.Length(); ++i) {
-    if (mDirectives[i]->equals(nsIContentSecurityPolicy::REFERRER_DIRECTIVE)) {
-      mozilla::dom::Sequence<nsString> srcs;
-      srcs.AppendElement(mReferrerPolicy, mozilla::fallible);
-      outCSP.mReferrer.Construct();
-      outCSP.mReferrer.Value() = srcs;
-    } else {
-      mDirectives[i]->toDomCSPStruct(outCSP);
-    }
+    mDirectives[i]->toDomCSPStruct(outCSP);
   }
 }
 
diff --git a/dom/security/nsCSPUtils.h b/dom/security/nsCSPUtils.h
index 4c0af92620..13747a6b04 100644
--- a/dom/security/nsCSPUtils.h
+++ b/dom/security/nsCSPUtils.h
@@ -134,7 +134,6 @@ static const char* CSPStrDirectives[] = {
   "reflected-xss",             // REFLECTED_XSS_DIRECTIVE
   "base-uri",                  // BASE_URI_DIRECTIVE
   "form-action",               // FORM_ACTION_DIRECTIVE
-  "referrer",                  // REFERRER_DIRECTIVE
   "manifest-src",              // MANIFEST_SRC_DIRECTIVE
   "upgrade-insecure-requests", // UPGRADE_IF_INSECURE_DIRECTIVE
   "child-src",                 // CHILD_SRC_DIRECTIVE
@@ -714,15 +713,6 @@ class nsCSPPolicy {
     inline bool getReportOnlyFlag() const
       { return mReportOnly; }
 
-    inline void setReferrerPolicy(const nsAString* aValue)
-      {
-        mReferrerPolicy = *aValue;
-        ToLowerCase(mReferrerPolicy);
-      }
-
-    inline void getReferrerPolicy(nsAString& outPolicy) const
-      { outPolicy.Assign(mReferrerPolicy); }
-
     void getReportURIs(nsTArray<nsString> &outReportURIs) const;
 
     void getDirectiveStringForContentType(CSPDirective aDirective,
@@ -743,7 +733,6 @@ class nsCSPPolicy {
     nsUpgradeInsecureDirective* mUpgradeInsecDir;
     nsTArray<nsCSPDirective*>   mDirectives;
     bool                        mReportOnly;
-    nsString                    mReferrerPolicy;
 };
 
 #endif /* nsCSPUtils_h___ */
diff --git a/dom/security/test/csp/file_referrerdirective.html b/dom/security/test/csp/file_referrerdirective.html
deleted file mode 100644
index 841ffe0587..0000000000
--- a/dom/security/test/csp/file_referrerdirective.html
+++ /dev/null
@@ -1,55 +0,0 @@
-<!DOCTYPE HTML>
-<html>
-<head>
-<title>Subframe test for bug 965727</title>
-
-<script type="text/javascript">
-// we can get the ID out of the querystring.
-var args = document.location.search.substring(1).split('&');
-var id = "unknown";
-for (var i=0; i < args.length; i++) {
-  var arg = unescape(args[i]);
-  if (arg.indexOf('=') > 0 && arg.indexOf('id') == 0) {
-    id = arg.split('=')[1].trim();
-  }
-}
-
-var results = {
-  'id': id,
-  'referrer': document.location.href,
-  'results': {
-    'sameorigin': false,
-    'crossorigin': false,
-    'downgrade': false
-  }
-};
-
-// this is called back by each script load.
-var postResult = function(loadType, referrerLevel, referrer) {
-  results.results[loadType] = referrerLevel;
-
-  // and then check if all three have loaded.
-  for (var id in results.results) {
-    if (!results.results[id]) {
-      return;
-    }
-  }
-  //finished if we don't return early
-  window.parent.postMessage(JSON.stringify(results), "*");
-  console.log(JSON.stringify(results));
-}
-
-</script>
-</head>
-<body>
-Testing ...
-
-<script src="https://example.com/tests/dom/security/test/csp/referrerdirective.sjs?type=sameorigin&"
-        onerror="postResult('sameorigin', 'error');"></script>
-<script src="https://test2.example.com/tests/dom/security/test/csp/referrerdirective.sjs?type=crossorigin&"
-        onerror="postResult('crossorigin', 'error');"></script>
-<script src="http://example.com/tests/dom/security/test/csp/referrerdirective.sjs?type=downgrade&"
-        onerror="postResult('downgrade', 'error');"></script>
-
-</body>
-</html>
diff --git a/dom/security/test/csp/file_upgrade_insecure_referrer.sjs b/dom/security/test/csp/file_upgrade_insecure_referrer.sjs
deleted file mode 100644
index e149afa4b0..0000000000
--- a/dom/security/test/csp/file_upgrade_insecure_referrer.sjs
+++ /dev/null
@@ -1,55 +0,0 @@
-// special *.sjs specifically customized for the needs of
-// Bug 1139297 and Bug 663570
-
-const PRE_HEAD =
-  "<!DOCTYPE HTML>" +
-  "<html>" +
-  "<head>";
-
- const POST_HEAD =
-   "<meta charset='utf-8'>" +
-   "<title>Bug 1139297 - Implement CSP upgrade-insecure-requests directive</title>" +
-   "</head>" +
-   "<body>" +
-  "<img id='testimage' src='http://example.com/tests/dom/security/test/csp/file_upgrade_insecure_referrer_server.sjs?img'></img>" +
-  "</body>" +
-  "</html>";
-
-const PRE_CSP = "upgrade-insecure-requests; default-src https:; ";
-const CSP_REFERRER_ORIGIN = "referrer origin";
-const CSP_REFEFFER_NO_REFERRER = "referrer no-referrer";
-
-function handleRequest(request, response)
-{
-  // avoid confusing cache behaviors
-  response.setHeader("Cache-Control", "no-cache", false);
-  var queryString = request.queryString;
-
-  if (queryString === "test1") {
-    response.setHeader("Content-Security-Policy", PRE_CSP + CSP_REFERRER_ORIGIN, false);
-    response.write(PRE_HEAD + POST_HEAD);
-  	return;
-  }
-
-  if (queryString === "test2") {
-    response.setHeader("Content-Security-Policy", PRE_CSP + CSP_REFEFFER_NO_REFERRER, false);
-    response.write(PRE_HEAD + POST_HEAD);
-  	return;
-  }
-
-  if (queryString === "test3") {
-  	var metacsp =  "<meta http-equiv=\"Content-Security-Policy\" content = \"" + PRE_CSP + CSP_REFERRER_ORIGIN + "\" >";
-    response.write(PRE_HEAD + metacsp + POST_HEAD);
-  	return;
-  }
-
-  if (queryString === "test4") {
-  	var metacsp =  "<meta http-equiv=\"Content-Security-Policy\" content = \"" + PRE_CSP + CSP_REFEFFER_NO_REFERRER + "\" >";
-    response.write(PRE_HEAD + metacsp + POST_HEAD);
-  	return;
-  }
-
-  // we should never get here, but just in case return
-  // something unexpected
-  response.write("do'h");
-}
diff --git a/dom/security/test/csp/file_upgrade_insecure_referrer_server.sjs b/dom/security/test/csp/file_upgrade_insecure_referrer_server.sjs
deleted file mode 100644
index be1e6da0ca..0000000000
--- a/dom/security/test/csp/file_upgrade_insecure_referrer_server.sjs
+++ /dev/null
@@ -1,56 +0,0 @@
-// Custom *.sjs file specifically for the needs of Bug:
-// Bug 1139297 - Implement CSP upgrade-insecure-requests directive
-
-// small red image
-const IMG_BYTES = atob(
-  "iVBORw0KGgoAAAANSUhEUgAAAAUAAAAFCAYAAACNbyblAAAAHElEQVQI12" +
-  "P4//8/w38GIAXDIBKE0DHxgljNBAAO9TXL0Y4OHwAAAABJRU5ErkJggg==");
-
-function handleRequest(request, response)
-{
-  // avoid confusing cache behaviors
-  response.setHeader("Cache-Control", "no-cache", false);
-  var queryString = request.queryString;
-
-  // (1) lets process the queryresult request async and
-  // wait till we have received the image request.
-  if (queryString == "queryresult") {
-    response.processAsync();
-    setObjectState("queryResult", response);
-    return;
-  }
-
-  // (2) Handle the image request and return the referrer
-  // result back to the stored queryresult request.
-  if (request.queryString == "img") {
-    response.setHeader("Content-Type", "image/png");
-    response.write(IMG_BYTES);
-
-    let referrer = "";
-    try {
-      referrer = request.getHeader("referer");
-    } catch (e) {
-      referrer = "";
-    }
-    // make sure the received image request was upgraded to https,
-    // otherwise we return not only the referrer but also indicate
-    // that the request was not upgraded to https. Note, that
-    // all upgrades happen in the browser before any non-secure
-    // request hits the wire.
-    referrer += (request.scheme == "https") ?
-                 "" : " but request is not https";
-
-    getObjectState("queryResult", function(queryResponse) {
-      if (!queryResponse) {
-        return;
-      }
-      queryResponse.write(referrer);
-      queryResponse.finish();
-    });
-    return;
-  }
-
-  // we should not get here ever, but just in case return
-  // something unexpected.
-  response.write("doh!");
-}
diff --git a/dom/security/test/csp/mochitest.ini b/dom/security/test/csp/mochitest.ini
index 86b7fd0cdc..93c4ee6f06 100644
--- a/dom/security/test/csp/mochitest.ini
+++ b/dom/security/test/csp/mochitest.ini
@@ -125,7 +125,6 @@ support-files =
   file_multi_policy_injection_bypass_2.html^headers^
   file_null_baseuri.html
   file_form-action.html
-  file_referrerdirective.html
   referrerdirective.sjs
   file_upgrade_insecure.html
   file_upgrade_insecure_meta.html
@@ -133,8 +132,6 @@ support-files =
   file_upgrade_insecure_wsh.py
   file_upgrade_insecure_reporting.html
   file_upgrade_insecure_reporting_server.sjs
-  file_upgrade_insecure_referrer.sjs
-  file_upgrade_insecure_referrer_server.sjs
   file_upgrade_insecure_cors.html
   file_upgrade_insecure_cors_server.sjs
   file_report_for_import.css
@@ -266,15 +263,12 @@ skip-if = toolkit == 'android' # Times out, not sure why (bug 1008445)
 [test_leading_wildcard.html]
 [test_multi_policy_injection_bypass.html]
 [test_null_baseuri.html]
-[test_referrerdirective.html]
 [test_dual_header.html]
 [test_upgrade_insecure.html]
 # no ssl support as well as websocket tests do not work (see test_websocket.html)
 skip-if = toolkit == 'android' || (os != 'linux' && !debug) # Bug 1316305, Bug 1183300
 [test_upgrade_insecure_reporting.html]
 skip-if = toolkit == 'android'
-[test_upgrade_insecure_referrer.html]
-skip-if = toolkit == 'android'
 [test_upgrade_insecure_cors.html]
 skip-if = toolkit == 'android'
 [test_report_for_import.html]
diff --git a/dom/security/test/csp/test_referrerdirective.html b/dom/security/test/csp/test_referrerdirective.html
deleted file mode 100644
index f590460a0f..0000000000
--- a/dom/security/test/csp/test_referrerdirective.html
+++ /dev/null
@@ -1,143 +0,0 @@
-<!--
-  Any copyright is dedicated to the Public Domain.
-  http://creativecommons.org/publicdomain/zero/1.0/
--->
-<!DOCTYPE HTML>
-<html>
-<!--
-https://bugzilla.mozilla.org/show_bug.cgi?id=965727
--->
-<head>
-  <meta charset="utf-8">
-  <title>Test for Content Security Policy referrer Directive (Bug 965727)</title>
-  <script type="text/javascript" src="/tests/SimpleTest/SimpleTest.js"></script>
-  <link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css" />
-</head>
-<body>
-<div id="content" style="display: none">
-
-</div>
-<pre id="test">
-<script class="testbody" type="application/javascript">
-/*
- * This tests various referrer policies and the referrer-sending behavior when
- * requesting scripts in different ways:
- *  - cross-origin (https://example.com -> https://test2.example.com)
- *  - same-origin (https://example.com -> https://example.com)
- *  - downgrade (https://example.com -> http://example.com)
- *
- * Each test creates an iframe that loads scripts for each of the checks.  If
- * the scripts are blocked, the test fails (they should run).  When loaded,
- * each script updates a results object in the test page, and then when the
- * test page has finished loading all the scripts, it postMessages back to this
- * page.  Once all tests are done, the results are checked.
- */
-
-var testData = {
-  'default': { 'csp': "script-src * 'unsafe-inline'; referrer default",
-          'expected': {  'sameorigin': 'full',
-                        'crossorigin': 'full',
-                          'downgrade': 'none' }},
-
-  'origin':  { 'csp': "script-src * 'unsafe-inline'; referrer origin",
-          'expected': {  'sameorigin': 'origin',
-                        'crossorigin': 'origin',
-                          'downgrade': 'origin' }},
-
-  'origin-when-cross-origin':  { 'csp': "script-src * 'unsafe-inline'; referrer origin-when-cross-origin",
-          'expected': {  'sameorigin': 'full',
-                        'crossorigin': 'origin',
-                          'downgrade': 'origin' }},
-
-  'unsafe-url':  { 'csp': "script-src * 'unsafe-inline'; referrer unsafe-url",
-          'expected': {  'sameorigin': 'full',
-                        'crossorigin': 'full',
-                          'downgrade': 'full' }},
-
-  'none':   { 'csp': "script-src * 'unsafe-inline'; referrer no-referrer",
-          'expected': {  'sameorigin': 'none',
-                        'crossorigin': 'none',
-                          'downgrade': 'none' }},
-
-  // referrer delivered through CSPRO should be ignored
-  'ignore-cspro':  { 'cspro': "script-src * 'unsafe-inline'; referrer origin",
-          'expected': {  'sameorigin': 'full',
-                        'crossorigin': 'full',
-                          'downgrade': 'none' }},
-
-  // referrer delivered through CSPRO should be ignored
-  'ignore-cspro2':   { 'csp'  : "script-src * 'unsafe-inline'; referrer no-referrer",
-                       'cspro': "script-src * 'unsafe-inline'; referrer origin",
-         'expected': {  'sameorigin': 'none',
-                        'crossorigin': 'none',
-                          'downgrade': 'none' }},
-  };
-
-var referrerDirectiveTests = {
-  // called via postMessage when one of the iframes is done running.
-  onIframeComplete: function(event) {
-    try {
-      var results = JSON.parse(event.data);
-      ok(results.hasOwnProperty('id'), "'id' property required in posted message " + event.data);
-
-      ok(testData.hasOwnProperty(results['id']), "Test " + results['id'] + " must be expected.");
-
-      // check all the various load types' referrers.
-      var expected = testData[results['id']].expected;
-      for (var t in expected) {
-        is(results.results[t], expected[t],
-          " referrer must match expected for " + t + " in " + results['id']);
-      }
-      testData[results['id']]['complete'] = true;
-
-    } catch(e) {
-      // fail -- should always be JSON
-      ok(false, "failed to parse posted message + " + event.data);
-      // have to end as well since not all messages were valid.
-      SimpleTest.finish();
-    }
-
-    referrerDirectiveTests.checkForCompletion();
-  },
-
-  // checks to see if all the parallel tests are done and validates results.
-  checkForCompletion: function() {
-    for (var id in testData) {
-      if (!testData[id].hasOwnProperty('complete')) {
-        return;
-      }
-    }
-    SimpleTest.finish();
-  }
-};
-
-SimpleTest.waitForExplicitFinish();
-// have to disable mixed content blocking to test https->http referrers.
-SpecialPowers.pushPrefEnv({
-    'set': [['security.mixed_content.block_active_content',   false],
-            ['security.mixed_content.block_display_content',  false],
-    ]
-    },
-    function() {
-      // each of the iframes we create will call us back when its contents are loaded.
-      window.addEventListener("message", referrerDirectiveTests.onIframeComplete.bind(window), false);
-
-      // one iframe created for each test case
-      for (var id in testData) {
-        var elt = document.createElement("iframe");
-        var src = "https://example.com/tests/dom/security/test/csp/file_testserver.sjs?id=" + id;
-        if (testData[id]['csp']) {
-          src += "&csp=" + escape(testData[id]['csp']);
-        }
-        if (testData[id]['cspro']) {
-          src += "&cspro=" + escape(testData[id]['cspro']);
-        }
-        src += "&file=tests/dom/security/test/csp/file_referrerdirective.html";
-        elt.src = src;
-        document.getElementById("content").appendChild(elt);
-      }
-    });
-</script>
-</pre>
-</body>
-</html>
diff --git a/dom/security/test/csp/test_upgrade_insecure_referrer.html b/dom/security/test/csp/test_upgrade_insecure_referrer.html
deleted file mode 100644
index 890c573350..0000000000
--- a/dom/security/test/csp/test_upgrade_insecure_referrer.html
+++ /dev/null
@@ -1,85 +0,0 @@
-<!DOCTYPE HTML>
-<html>
-<head>
-  <meta charset="utf-8">
-  <title>Bug 1139297 - Implement CSP upgrade-insecure-requests directive</title>
-  <!-- Including SimpleTest.js so we can use waitForExplicitFinish !-->
-  <script type="text/javascript" src="/tests/SimpleTest/SimpleTest.js"></script>
-  <link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css" />
-</head>
-<body>
-<iframe style="width:100%;" id="testframe"></iframe>
-
-<script class="testbody" type="text/javascript">
-
-/* Description of the test:
- * We load a page that makes use of the CSP referrer directive as well
- * as upgrade-insecure-requests. The page loads an image over http.
- * The test makes sure the request gets upgraded to https and the
- * correct referrer gets sent.
- */
-
-var tests = [
-  {
-    query: "test1",
-    description: "upgrade insecure request with 'referrer = origin' (CSP in header)",
-    result: "http://example.com/"
-  },
-  {
-    query: "test2",
-    description: "upgrade insecure request with 'referrer = no-referrer' (CSP in header)",
-    result: ""
-  },
-  {
-    query: "test3",
-    description: "upgrade insecure request with 'referrer = origin' (Meta CSP)",
-    result: "http://example.com/"
-  },
-  {
-    query: "test4",
-    description: "upgrade insecure request with 'referrer = no-referrer' (Meta CSP)",
-    result: ""
-  }
-];
-
-var counter = 0;
-var curTest;
-
-function loadTestPage() {
-  curTest = tests[counter++];
-  var src = "http://example.com/tests/dom/security/test/csp/file_upgrade_insecure_referrer.sjs?";
-  // append the query
-  src += curTest.query;
-  document.getElementById("testframe").src = src;
-}
-
-function runNextTest() {
-  // sends a request to the server which is processed async and returns
-  // once the server received the expected image request
-  var myXHR = new XMLHttpRequest();
-  myXHR.open("GET", "file_upgrade_insecure_referrer_server.sjs?queryresult");
-  myXHR.onload = function(e) {
-    is(myXHR.responseText, curTest.result, curTest.description);
-    if (counter == tests.length) {
-      SimpleTest.finish();
-      return;
-    }
-    // move on to the next test by setting off another query request.
-    runNextTest();
-  }
-  myXHR.onerror = function(e) {
-    ok(false, "could not query results from server (" + e.message + ")");
-    SimpleTest.finish();
-  }
-  myXHR.send();
-
-  // give it some time and load the testpage
-  SimpleTest.executeSoon(loadTestPage);
-}
-
-SimpleTest.waitForExplicitFinish();
-runNextTest();
-
-</script>
-</body>
-</html>
diff --git a/dom/security/test/gtest/TestCSPParser.cpp b/dom/security/test/gtest/TestCSPParser.cpp
index 7964bf43a3..a5c2d8d770 100644
--- a/dom/security/test/gtest/TestCSPParser.cpp
+++ b/dom/security/test/gtest/TestCSPParser.cpp
@@ -229,8 +229,6 @@ TEST(CSPParser, Directives)
       "script-src 'nonce-correctscriptnonce'" },
     { "script-src 'sha256-siVR8vAcqP06h2ppeNwqgjr0yZ6yned4X2VF84j4GmI='",
       "script-src 'sha256-siVR8vAcqP06h2ppeNwqgjr0yZ6yned4X2VF84j4GmI='" },
-    { "referrer no-referrer",
-      "referrer no-referrer" },
     { "require-sri-for script style",
       "require-sri-for script style"},
     { "script-src 'nonce-foo' 'unsafe-inline' ",
@@ -305,8 +303,6 @@ TEST(CSPParser, IgnoreUpperLowerCasePolicies)
       "script-src 'nonce-NONCENEEDSTOBEUPPERCASE'" },
     { "script-src 'SHA256-siVR8vAcqP06h2ppeNwqgjr0yZ6yned4X2VF84j4GmI='",
       "script-src 'sha256-siVR8vAcqP06h2ppeNwqgjr0yZ6yned4X2VF84j4GmI='" },
-    { "refERRer No-refeRRer",
-      "referrer no-referrer" },
     { "upgrade-INSECURE-requests",
       "upgrade-insecure-requests" },
     { "sanDBox alloW-foRMs",
@@ -574,8 +570,6 @@ TEST(CSPParser, BadPolicies)
     { "defaut-src asdf", "" },
     { "default-src: aaa", "" },
     { "asdf http://test.com", ""},
-    { "referrer", ""},
-    { "referrer foo", ""},
     { "require-sri-for", ""},
     { "require-sri-for foo", ""},
     { "report-uri", ""},
diff --git a/dom/workers/WorkerPrivate.cpp b/dom/workers/WorkerPrivate.cpp
index bb745ba491..7267329a9d 100644
--- a/dom/workers/WorkerPrivate.cpp
+++ b/dom/workers/WorkerPrivate.cpp
@@ -2419,20 +2419,10 @@ WorkerPrivateParent<Derived>::SetCSPFromHeaderValues(const nsACString& aCSPHeade
   rv = csp->GetAllowsEval(&reportEvalViolations, &evalAllowed);
   NS_ENSURE_SUCCESS(rv, rv);
 
-  // Set ReferrerPolicy, default value is set in GetReferrerPolicy
-  bool hasReferrerPolicy = false;
-  uint32_t rp = mozilla::net::RP_Unset;
-  rv = csp->GetReferrerPolicy(&rp, &hasReferrerPolicy);
-  NS_ENSURE_SUCCESS(rv, rv);
-
   mLoadInfo.mCSP = csp;
   mLoadInfo.mEvalAllowed = evalAllowed;
   mLoadInfo.mReportCSPViolations = reportEvalViolations;
 
-  if (hasReferrerPolicy) {
-    mLoadInfo.mReferrerPolicy = static_cast<net::ReferrerPolicy>(rp);
-  }
-
   return NS_OK;
 }
 
@@ -3696,16 +3686,6 @@ WorkerLoadInfo::SetPrincipalOnMainThread(nsIPrincipal* aPrincipal,
 
   if (mCSP) {
     mCSP->GetAllowsEval(&mReportCSPViolations, &mEvalAllowed);
-    // Set ReferrerPolicy
-    bool hasReferrerPolicy = false;
-    uint32_t rp = mozilla::net::RP_Unset;
-
-    rv = mCSP->GetReferrerPolicy(&rp, &hasReferrerPolicy);
-    NS_ENSURE_SUCCESS(rv, rv);
-
-    if (hasReferrerPolicy) {
-      mReferrerPolicy = static_cast<net::ReferrerPolicy>(rp);
-    }
   } else {
     mEvalAllowed = true;
     mReportCSPViolations = false;
diff --git a/netwerk/base/ReferrerPolicy.h b/netwerk/base/ReferrerPolicy.h
index 591b9daf03..d68a165819 100644
--- a/netwerk/base/ReferrerPolicy.h
+++ b/netwerk/base/ReferrerPolicy.h
@@ -114,30 +114,6 @@ ReferrerPolicyFromString(const nsAString& content)
 
 }
 
-inline bool
-IsValidReferrerPolicy(const nsAString& content)
-{
-  if (content.IsEmpty()) {
-    return true;
-  }
-
-  nsString lowerContent(content);
-  ToLowerCase(lowerContent);
-
-  return lowerContent.EqualsLiteral(kRPS_Never)
-      || lowerContent.EqualsLiteral(kRPS_No_Referrer)
-      || lowerContent.EqualsLiteral(kRPS_Origin)
-      || lowerContent.EqualsLiteral(kRPS_Default)
-      || lowerContent.EqualsLiteral(kRPS_No_Referrer_When_Downgrade)
-      || lowerContent.EqualsLiteral(kRPS_Origin_When_Cross_Origin)
-      || lowerContent.EqualsLiteral(kRPS_Origin_When_Crossorigin)
-      || lowerContent.EqualsLiteral(kRPS_Same_Origin)
-      || lowerContent.EqualsLiteral(kRPS_Strict_Origin)
-      || lowerContent.EqualsLiteral(kRPS_Strict_Origin_When_Cross_Origin)
-      || lowerContent.EqualsLiteral(kRPS_Always)
-      || lowerContent.EqualsLiteral(kRPS_Unsafe_URL);
-}
-
 inline ReferrerPolicy
 AttributeReferrerPolicyFromString(const nsAString& content)
 {
diff --git a/parser/html/nsHtml5TreeOpExecutor.cpp b/parser/html/nsHtml5TreeOpExecutor.cpp
index 7fe1fdd39e..e134b37ba6 100644
--- a/parser/html/nsHtml5TreeOpExecutor.cpp
+++ b/parser/html/nsHtml5TreeOpExecutor.cpp
@@ -1138,15 +1138,6 @@ nsHtml5TreeOpExecutor::AddSpeculationCSP(const nsAString& aCSP)
                                 true); // delivered through the meta tag
   NS_ENSURE_SUCCESS_VOID(rv);
 
-  // Record "speculated" referrer policy for preloads
-  bool hasReferrerPolicy = false;
-  uint32_t referrerPolicy = mozilla::net::RP_Default;
-  rv = preloadCsp->GetReferrerPolicy(&referrerPolicy, &hasReferrerPolicy);
-  NS_ENSURE_SUCCESS_VOID(rv);
-  if (hasReferrerPolicy) {
-    SetSpeculationReferrerPolicy(static_cast<ReferrerPolicy>(referrerPolicy));
-  }
-
   mDocument->ApplySettingsFromCSP(true);
 }