Referrer-Policy/EN/Solution Tips

Aus Siwecos
Version vom 11. März 2019, 11:55 Uhr von Siwebot (Diskussion | Beiträge) (Die Seite wurde neu angelegt: „We recommend that the Referrer Policy Header be set to be as restrictive as possible, i.e. to be set to ”no-referrer," for example. = = Examples = = '''R…“)
(Unterschied) ← Nächstältere Version | Aktuelle Version (Unterschied) | Nächstjüngere Version → (Unterschied)
Wechseln zu: Navigation, Suche

We recommend that the Referrer Policy Header be set to be as restrictive as possible, i.e. to be set to ”no-referrer," for example.

= Examples =

Referrer Policy Definition by Server Header:

 # Referrer Policy
Header set referrer-Policy "no-referrer" 

Referrer Policy Definition by HTML code:

 <meta name="referrer" content="no-referrer" "/> 

Statement: The value `no-referrer` instructs the browser to send Never Referer Header, which is provided by your site. This includes links to pages on your own website.


style="border: 4px solid #C31622; color:#000000; background-color:#f6f6f6;" Other useful instructions can be `same-origin`, `strict-origin` or `origin-when-cross-origin`.


The value `same origin` instructs the browser to send only Referer Header provided by your website. If the target is another domain, no referrer information will be sent.

The value `strict-origin` instructs the browser, to always indicate the origin domain as Referer Header.

The value origin-when-cross-origin` instructs the browser to send the full referrer URL only if you stay on the same Domain. Once the domain is left via HTTPS or another Domain is addressed, only the source domain is sent.

Detailed information and examples can be found at Helme.