Referrer-Policy header
Referrer-Policy controls how much of the current URL is sent in the Referer header when users follow links or load resources.
Recommended value
Referrer-Policy: strict-origin-when-cross-originWhat it protects against
Leaking private paths, tokens or search terms in URLs to third-party sites.
Before you turn it on
strict-origin-when-cross-origin is the browser default in modern browsers and a safe choice. Use no-referrer for maximum privacy if analytics do not depend on referrers.
How to add Referrer-Policy
Check your site's headers now
Korrali Web scans your site and shows which security headers are missing or misconfigured.
Run a free scan