Referrer Policy recommendation - add same-origin?

[andersju]

I noticed that under "Check for privacy-friendly Referrer Policy", you write "Conditions for passing: Referrer-Policy header is present. Referrer-Policy is set to “no-referrer” (which is the only recommended policy recommended by dataskydd.net in their Webbkoll scan service)."

We (dataskydd.net) now recommend no-referrer or same-origin (https://www.w3.org/TR/referrer-policy/#referrer-policy-same-origin), as the latter is now in the standard and is supported by at least FF and Chrome. Or use both, with the fallback value being first (https://www.w3.org/TR/referrer-policy/#unknown-policy-values).