search

dddeastanglia / DDDEastAnglia

DDD East Anglia website
https://www.dddeastanglia.com
7 stars 10 forks source link

Add Referer Policy header #372

Open philpursglove opened 5 years ago

philpursglove commented 5 years ago

Add a Referer Policy http header - see https://scotthelme.co.uk/a-new-security-header-referrer-policy/

Extend the existing SecurityHeadersFilter to add Referrer-Policy. strict-origin is probably the right value to set but this needs some investigation and validation.