webzod
account

Set a valid Referrer-Policy on Caddy

headers.referrer.invalid · effort: minutes

Why it matters

The Referrer-Policy value is not one browsers recognise, so they ignore it and use their own default. Use a standard value such as strict-origin-when-cross-origin.

The fix

  1. Set it with the > prefix so it replaces the application's value, then reload.
Caddyfile 
header >Referrer-Policy strict-origin-when-cross-origin

Read the documentation (opens in a new tab)

Related

Scan your domain to see whether this applies to you.