From aefefc74c468ffd90e3ac97bfed5973717138759 Mon Sep 17 00:00:00 2001 From: Claire Date: Tue, 10 Jan 2023 05:18:43 +0100 Subject: Change referrer-policy to no-referrer application-wide (#23014) --- config/environments/production.rb | 1 + 1 file changed, 1 insertion(+) (limited to 'config') diff --git a/config/environments/production.rb b/config/environments/production.rb index 5ea9ea9ba..abb46bd16 100644 --- a/config/environments/production.rb +++ b/config/environments/production.rb @@ -138,6 +138,7 @@ Rails.application.configure do 'X-Content-Type-Options' => 'nosniff', 'X-XSS-Protection' => '0', 'Permissions-Policy' => 'interest-cohort=()', + 'Referrer-Policy' => 'no-referrer', } config.x.otp_secret = ENV.fetch('OTP_SECRET') -- cgit