diff options
| author | Peter Kraume <peter.kraume@gmx.de> | 2018-11-27 16:34:54 +0100 |
|---|---|---|
| committer | Backportbot <backportbot-noreply@rullzer.com> | 2018-11-29 16:48:12 +0000 |
| commit | 6dbfe2477751a3a04b59a42561326f85f0a35946 (patch) | |
| tree | b2615a35e714a1928a2b933d1615251364070253 | |
| parent | 76cd8babd2d5dd86ba8f1a50bd2bf970862e155a (diff) | |
| download | nextcloud-server-6dbfe2477751a3a04b59a42561326f85f0a35946.tar.gz nextcloud-server-6dbfe2477751a3a04b59a42561326f85f0a35946.zip | |
Set Referrer-Policy also in addSecurityHeaders()
Fix: #12689
Signed-off-by: Peter Kraume <peter.kraume@gmx.de>
| -rw-r--r-- | lib/private/legacy/response.php | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/lib/private/legacy/response.php b/lib/private/legacy/response.php index 93023f61e99..bfee5aadb4d 100644 --- a/lib/private/legacy/response.php +++ b/lib/private/legacy/response.php @@ -104,6 +104,7 @@ class OC_Response { header('X-Robots-Tag: none'); // https://developers.google.com/webmasters/control-crawl-index/docs/robots_meta_tag header('X-Download-Options: noopen'); // https://msdn.microsoft.com/en-us/library/jj542450(v=vs.85).aspx header('X-Permitted-Cross-Domain-Policies: none'); // https://www.adobe.com/devnet/adobe-media-server/articles/cross-domain-xml-for-streaming.html + header('Referrer-Policy: no-referrer'); // https://www.w3.org/TR/referrer-policy/ } } |