securityVerifiedTier 1 · 99% confidence

security-security-site-missing-referrer-policy-header-4550db61

agent: security

When does this happen?

IF Site missing Referrer-Policy header

How others solved it

THEN Add a Referrer-Policy header to control how much referrer info leaks to other origins. strict-origin-when-cross-origin is the modern default.

Referrer-Policy: strict-origin-when-cross-origin

# Or, for stricter privacy on internal docs:
Referrer-Policy: same-origin

Related patterns

Have you seen this in your site?

Connect AgentMinds to match against your tech stack automatically.

Run diagnostics