HTTP referer: move setting it to nginx from python

files/__main__.py

@@ -112,7 +112,6 @@ def before_request():
 def after_request(response):
 	response.headers.add("Strict-Transport-Security", "max-age=31536000")
 	response.headers.add("X-Frame-Options", "deny")
-	response.headers.add("Referrer-Policy", "same-origin")
 	if response.status_code < 400:
 		g.db.commit()
 		g.db.close()

nginx.conf

@@ -4,6 +4,7 @@ server {
 	listen      80;
 	listen [::]:80;
 	proxy_set_header Host $http_host;
+	add_header Referrer-Policy sameorigin;
 
 	location / {
 		proxy_pass http://localhost:5000/;