Set expicit referrer policy

HackerspaceMumbai · Sep 7, 2020 · a734e39 · a734e39
1 parent d454aaa
commit a734e39
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/_includes/layouts/base.njk b/_includes/layouts/base.njk
@@ -30,6 +30,13 @@
     {% endif %}
 
     <link rel="canonical" href="{{ metadata.url }}{{ canonicalUrl or page.url }}">
+    <!-- This is a blog and so it SHOULD be safe and it is nice for the web 
+         to send referrers cross-origin.
+         However, if you use sensitive data in URLs, consider changing this to
+         a value like `origin-when-cross-origin`
+         https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
+          -->
+    <meta name="referrer" content="no-referrer-when-downgrade">
     <link rel="alternate" href="{{ metadata.feed.path | url }}" type="application/atom+xml" title="{{ metadata.title }}">
 
     <link rel="preconnect" href="/" crossorigin>