about summary refs log tree commit diff
path: root/config
diff options
context:
space:
mode:
authorClaire <claire.github-309c@sitedethib.com>2023-01-10 05:18:43 +0100
committerGitHub <noreply@github.com>2023-01-10 05:18:43 +0100
commitaefefc74c468ffd90e3ac97bfed5973717138759 (patch)
tree22d89e0b03da8b3d6cea98f8b51bcd5307af05a5 /config
parent2bcb081ce8ab42649932404f3a13f69a0b582af9 (diff)
Change referrer-policy to no-referrer application-wide (#23014)
Diffstat (limited to 'config')
-rw-r--r--config/environments/production.rb1
1 files changed, 1 insertions, 0 deletions
diff --git a/config/environments/production.rb b/config/environments/production.rb
index 5ea9ea9ba..abb46bd16 100644
--- a/config/environments/production.rb
+++ b/config/environments/production.rb
@@ -138,6 +138,7 @@ Rails.application.configure do
     'X-Content-Type-Options' => 'nosniff',
     'X-XSS-Protection'       => '0',
     'Permissions-Policy'     => 'interest-cohort=()',
+    'Referrer-Policy'        => 'no-referrer',
   }
 
   config.x.otp_secret = ENV.fetch('OTP_SECRET')