fix: make referer policy header less strict in prod (for rails)

hotosm · Apr 28, 2024 · 6de2896 · 6de2896
1 parent 07a715e
commit 6de2896
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/nginx/options-security.conf b/nginx/options-security.conf
@@ -1,4 +1,4 @@
-add_header Referrer-Policy                   "no-referrer"       always;
+add_header Referrer-Policy                   "same-origin"       always;
 add_header X-Content-Type-Options            "nosniff"           always;
 add_header X-Frame-Options                   "SAMEORIGIN"        always;
 add_header X-Permitted-Cross-Domain-Policies "none"              always;