webzod
account

Set a Referrer-Policy on Shopify

headers.referrer.missing · effort: minutes

Why it matters

Without one, how much of your page addresses other sites receive depends on each browser's default. strict-origin-when-cross-origin sends only your domain to other sites and nothing over insecure connections.

The fix

  1. Online Store, Themes, then Edit code on the live theme, and open layout/theme.liquid.
  2. Add the meta tag below inside the head element and save. Shopify does not let stores set the header, but browsers apply this tag to the page.
layout/theme.liquid 
<meta name="referrer" content="strict-origin-when-cross-origin">

Read the documentation (opens in a new tab)

Related

Scan your domain to see whether this applies to you.