From 6828313ecf2fea06e500f447f3abb92e5651c1fa Mon Sep 17 00:00:00 2001
From: Bryan Newbold <bnewbold@robocracy.org>
Date: Mon, 12 Nov 2018 22:50:58 -0800
Subject: set HTTPS referrer policy in HTML <meta>

The intent of this change is for user agents to set the Referrer HTTP
field when following outlinks from fatcat.wiki, but only with the source
domain, not the full URL.
---
 python/fatcat/templates/base.html | 1 +
 1 file changed, 1 insertion(+)

(limited to 'python')

diff --git a/python/fatcat/templates/base.html b/python/fatcat/templates/base.html
index 670d854f..856a6e03 100644
--- a/python/fatcat/templates/base.html
+++ b/python/fatcat/templates/base.html
@@ -5,6 +5,7 @@
   <meta name="viewport" content="width=device-width">
 
   <title>{% block title %}fatcat!{% endblock %}</title>
+  <meta name="referrer" content="origin-when-cross-origin">
   <meta name="viewport" content="width=device-width, initial-scale=1">
   <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/semantic-ui@2.3.2/dist/semantic.min.css">
   <script
-- 
cgit v1.2.3