// http header · security header

Referrer-Policy

How much referrer information to send

What the Referrer-Policy header does

Referrer-Policy controls how much of the referring URL is sent in the Referer header on outgoing requests, from no-referrer (send nothing) to strict-origin-when-cross-origin (send the full URL same-origin, only the origin cross-origin). It prevents leaking sensitive path/query data.

Example

Referrer-Policy: no-referrer

Where it's used

Referrer-Policy is a security header. Security headers tell the browser to turn on protections against common web attacks.

Other security headers