Referrer-Policy missing
Check id: hdr.referrer_missing · fix effort: low
What it means
Links from your site can leak full page URLs to the destination. Minor privacy hygiene.
The technical detail
No Referrer-Policy header. Modern browser defaults are decent, an explicit policy is better.
How to fix it
- Add
Referrer-Policy: strict-origin-when-cross-origin.
Does your domain have this problem?
Run a free scan, takes about ten seconds.