No Referrer-Policy
Scan rule · RSC-SEC-024
- Security
- Severity: Low
- CWE-200
Checks whether outgoing links leak internal URLs including query strings to third parties.
Scan tier
- External scan (anonymous)
How to fix it
Set `Referrer-Policy: strict-origin-when-cross-origin`.