referer: only send for same-origin requests

2022-10-29 16:33:17 -05:00 · 2022-10-29 16:33:17 -05:00 · 3ac5fad2d8
parent 940c475277
commit 3ac5fad2d8
1 changed files with 1 additions and 0 deletions
--- a/files/main.py
+++ b/files/main.py
@ -112,6 +112,7 @@ def before_request():
 def after_request(response):
 	response.headers.add("Strict-Transport-Security", "max-age=31536000")
 	response.headers.add("X-Frame-Options", "deny")
+	response.headers.add("Referrer-Policy", "same-origin")
 	if response.status_code < 400:
 		g.db.commit()
 		g.db.close()