Referrer-Policy missing or unsafe
Checks for a Referrer-Policy header that does not leak full URLs.
Recommended next step if found
Send Referrer-Policy: strict-origin-when-cross-origin.
Referrer Policy
Referrer-Policy influences how much referring-page information browsers send with requests. Choose a policy consistent with the site’s privacy and functional needs.
Related public checks
The following checks provide related public observations. Their presence does not mean this entire topic has been tested or that the application is secure.
Keep the scope.
A blocked or unfinished check remains unverified. Review technical recommendations with the person operating the website and test changes before applying them to a live service.
Read the full methodology