add Referrer-Policy: no-referrer

fixes #139
nolanlawson · Apr 20, 2018 · 94fc3ab · 94fc3ab
1 parent 79b848d
commit 94fc3ab
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/server.js b/server.js
@@ -42,6 +42,9 @@ app.use(nonDebugOnly(helmet({
       objectSrc: [`'none'`],
       manifestSrc: [`'self'`]
     }
+  },
+  referrerPolicy: {
+    policy: 'no-referrer'
   }
 })))