Hello there, I want to set the 'Referrer-Policy header to ‘same-origin’. This can’t be done via nginx, because it’s set via Redis/Rails. Default seems: Referrer-Policy' => 'strict-origin-when-cross-origin' Is it possible to change this to: Referrer-Policy' => 'same-origin' I could not find the…

Yeah. Stupid. I was not searching at the right place. I found many entries of Referrer-Policy' => 'strict-origin-when-cross-origin' Here is a list (grep strict-origin-when-cross-origin /var/www/discourse/ -R): /var/www/discourse/vendor/bundle/ruby/2.7.0/gems/rack-protection-2.2.2/lib/rack/prote…

Very nasty hack here but you could resolve this in nginx by adding a proxy_hide_header and follow it with your own add_header

Yeah nasty hack. Don’t like that. :wink:

Any help Herr where is the right place that is used in production?

A slightly less nasty hack is putting this in the HTML head part of a custom theme component: <meta name="referrer" content="same-origin"> That doesn’t remove the HTTP header, and I couldn’t find any definitive info if the HTTP header overwrites the HTML meta tag or the other way around, but at le…

'Referrer-Policy'를 'same-origin'으로 설정

제품 지원 자체 호스팅

RGJ (Richard - Communiteq) 10월 10, 2022, 4:31오후 3

여기에 아주 지저분한 해킹 방법이 있지만

nginx에서 proxy_hide_header를 추가한 뒤, 나만의 add_header를 붙여 이 문제를 해결할 수 있습니다.

글		댓글	조회수
Allow customization of Referrer-Policy Feature	3	1219	1월 18, 2019
Harden Referrer-Policy Header Feature	9	1874	10월 23, 2018
Option to remove the referrer for external links Feature	4	1007	5월 18, 2022
Adding HTTP Headers to Plugin in Development Development	3	943	5월 18, 2020
No `Referer:`, no embedding Product Support	5	2401	9월 16, 2020

'Referrer-Policy'를 'same-origin'으로 설정

Related topics