webzod
account

Set a Referrer-Policy on Netlify

headers.referrer.missing · effort: minutes

Why it matters

Without one, how much of your page addresses other sites receive depends on each browser's default. strict-origin-when-cross-origin sends only your domain to other sites and nothing over insecure connections.

The fix

  1. Add the lines to _headers in the publish directory (or [[headers]] in netlify.toml) and redeploy. They do not apply to Netlify Functions, Edge Functions or proxied responses; those must send the header themselves.
_headers 
/*
  Referrer-Policy: strict-origin-when-cross-origin

Read the documentation (opens in a new tab)

Related

Scan your domain to see whether this applies to you.