Change referrer-policy header default value

bepsvpt · May 16, 2017 · 8367d29 · 8367d29
1 parent 540b381
commit 8367d29
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/config/secure-headers.php b/config/secure-headers.php
@@ -61,7 +61,7 @@
      *                  'same-origin', 'strict-origin', 'strict-origin-when-cross-origin', 'unsafe-url'
      */
 
-    'referrer-policy' => 'strict-origin-when-cross-origin',
+    'referrer-policy' => 'no-referrer',
 
     /*
      * HTTP Strict Transport Security

diff --git a/tests/SecureHeadersTest.php b/tests/SecureHeadersTest.php
@@ -17,7 +17,7 @@ public function test_send_headers()
         $headers = xdebug_get_headers();
 
         $this->assertContains('X-Content-Type-Options: nosniff', $headers);
-        $this->assertContains('Referrer-Policy: strict-origin-when-cross-origin', $headers);
+        $this->assertContains('Referrer-Policy: no-referrer', $headers);
     }
 
     public function test_disable_header()