Mercurial > repos > other > Puppet
changeset 475:1d39bde7f909
Improve referer privacy for HTTPS
Mozilla Observatory said we weren't private enough.
The descriptions are a bit technical and unclear!
| author | IBBoard <dev@ibboard.co.uk> |
|---|---|
| date | Sun, 11 Aug 2024 11:18:31 +0100 |
| parents | 28d327443c45 |
| children | b0531370e183 |
| files | modules/website/files/zzz-0-custom.conf |
| diffstat | 1 files changed, 1 insertions(+), 1 deletions(-) [+] |
line wrap: on
line diff
--- a/modules/website/files/zzz-0-custom.conf Sun Aug 11 11:16:05 2024 +0100 +++ b/modules/website/files/zzz-0-custom.conf Sun Aug 11 11:18:31 2024 +0100 @@ -75,7 +75,7 @@ ServerTokens Minor -Header always set Referrer-Policy "no-referrer-when-downgrade" +Header always set Referrer-Policy "strict-origin-when-cross-origin" # FIXME: This shouldn't be a fixed URL! Header always set Expect-CT "max-age=0, report-uri='https://ibboard.report-uri.io/r/default/ct/reportOnly'"