Referrer-Policy header present
A Referrer-Policy header stops the browser leaking full URLs (which can carry session tokens or internal paths) to third-party sites via the Referer header.
Security
Mozilla Web Security: Referrer-Policy
Advanced Security Audit
In short
No Referrer-Policy header — full URLs may leak to third-party sites. This check is fully automated — the scanner returns a definitive pass or fail.
How to fix it
Add a Referrer-Policy response header such as "strict-origin-when-cross-origin" or "no-referrer".
Standards this maps to
- Mozilla Web Security: Referrer-Policy
- OWASP ASVS V14.4 (security headers)
Frameworks that require this
Advanced Security Audit
Severity
info — an advisory improvement.
Scans this and 300+ other checks across accessibility, SEO, security & speed — first audit free.