webzod
account

Set a Referrer-Policy on Vercel

headers.referrer.missing · effort: minutes

Why it matters

Without one, how much of your page addresses other sites receive depends on each browser's default. strict-origin-when-cross-origin sends only your domain to other sites and nothing over insecure connections.

The fix

  1. Add the header to vercel.json and redeploy.
vercel.json 
{
  "headers": [
    {
      "source": "/(.*)",
      "headers": [{ "key": "Referrer-Policy", "value": "strict-origin-when-cross-origin" }]
    }
  ]
}

Read the documentation (opens in a new tab)

Related

Scan your domain to see whether this applies to you.