Stricter referrer policy by default (strict-origin-when-cross-origin). (#8910)

isoos · web-flow · commit 893407f3bdb0 · 2025-08-21T13:33:56.000+02:00
diff --git a/app/lib/shared/handlers.dart b/app/lib/shared/handlers.dart
@@ -30,7 +30,7 @@ Map<String, Object> _htmlResponseHeaders(
   headers ??= <String, Object>{};
   headers['content-type'] = 'text/html; charset="utf-8"';
   headers['referrer-policy'] =
-      noReferrer ? 'no-referrer' : 'no-referrer-when-downgrade';
+      noReferrer ? 'no-referrer' : 'strict-origin-when-cross-origin';
   return headers;
 }
 

Original file line number	Diff line number	Diff line change
`@@ -30,7 +30,7 @@ Map<String, Object> _htmlResponseHeaders(`
`30`	`30`	`headers ??= <String, Object>{};`
`31`	`31`	`headers['content-type'] = 'text/html; charset="utf-8"';`
`32`	`32`	`headers['referrer-policy'] =`
`33`		`- noReferrer ? 'no-referrer' : 'no-referrer-when-downgrade';`
	`33`	`+ noReferrer ? 'no-referrer' : 'strict-origin-when-cross-origin';`
`34`	`34`	`return headers;`
`35`	`35`	`}`
`36`	`36`