Security headers check
A referrer policy is set
The Referrer-Policy header is present.
low severitysec.referrer-policy
Run this check on your site
Runs just this check in quick mode. The report opens with the evidence and the fix.
Why it matters
The referrer policy decides how much of the current URL travels with a request to another site. A strict policy keeps internal paths private.
How to fix it
Send Referrer-Policy: strict-origin-when-cross-origin, or stricter.
The details
- Category
- Security headers
- Severity of a failure
- low
- Confidence
- high
- Needs a browser
- No
- Check id
- sec.referrer-policy