From 1266e1f02bd446faf0f67669064b01e8ba5a180b Mon Sep 17 00:00:00 2001 From: Alexander Gebhard <20429006+fr0zenbits@users.noreply.github.com> Date: Thu, 12 Oct 2017 22:24:48 -0500 Subject: [PATCH] Added Referrer Policy --- server/middlewares/security.js | 3 +++ 1 file changed, 3 insertions(+) diff --git a/server/middlewares/security.js b/server/middlewares/security.js index 4a04056c..934fb38e 100644 --- a/server/middlewares/security.js +++ b/server/middlewares/security.js @@ -25,6 +25,9 @@ module.exports = function (req, res, next) { // -> Disable IE Compatibility Mode res.set('X-UA-Compatible', 'IE=edge') + + // -> Disables referrer header when navigating to a different origin + res.set('Referrer-Policy', 'same-origin') return next() }