webzod
account

Set a valid Referrer-Policy on Apache

headers.referrer.invalid · effort: minutes

Why it matters

The Referrer-Policy value is not one browsers recognise, so they ignore it and use their own default. Use a standard value such as strict-origin-when-cross-origin.

The fix

  1. Remove the copy in the default table and set one valid value, then reload.
apache 
Header onsuccess unset Referrer-Policy
Header always set Referrer-Policy "strict-origin-when-cross-origin"

Read the documentation (opens in a new tab)

Related

Scan your domain to see whether this applies to you.