webzod
account

Set a valid Referrer-Policy on Cloudflare

headers.referrer.invalid · effort: minutes

Why it matters

The Referrer-Policy value is not one browsers recognise, so they ignore it and use their own default. Use a standard value such as strict-origin-when-cross-origin.

The fix

  1. Create or edit a Response Header Transform Rule (Rules, Overview) with Set static, header Referrer-Policy, value strict-origin-when-cross-origin. Set replaces the origin's value.

Read the documentation (opens in a new tab)

Related

Scan your domain to see whether this applies to you.