# Set 'Referrer-Policy' =\> 'same-origin'

**URL:** <https://meta.discourse.org/t/set-referrer-policy-same-origin/241111>\
**Category:** Self-hosting\
**Created:** [October 6, 2022, 9:42am UTC](https://meta.discourse.org/t/set-referrer-policy-same-origin/241111 "2022-10-06T09:42:39Z")\
**Posts on this page:** 1\
**Showing post:** 6

<div class="post-metadata">

**Author:** ![Kianga](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/kianga/32/543546_2.png) [@Kianga](https://meta.discourse.org/u/Kianga)\
**Post date:** [February 23, 2026, 7:26pm UTC](https://meta.discourse.org/t/set-referrer-policy-same-origin/241111/6 "2026-02-23T19:26:01Z")

</div>

A slightly less nasty hack is putting this in the HTML head part of a custom theme component:

```html
<meta name="referrer" content="same-origin">

```

That doesn’t remove the HTTP header, and I couldn’t find any definitive info if the HTTP header overwrites the HTML meta tag or the other way around, but at least according to a quick test with [whatsmyreferer.com](https://whatsmyreferer.com/), it seems to work: no more referrer header is sent on outgoing links.

---

_[View the full topic](https://meta.discourse.org/t/set-referrer-policy-same-origin/241111)._