add Referrer-Policy: no-referrer (#187)

fixes #139
nolanlawson · Apr 20, 2018 · d8906b2 · d8906b2
1 parent 77ba91c
commit d8906b2
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/server.js b/server.js
@@ -42,6 +42,9 @@ app.use(nonDebugOnly(helmet({
       objectSrc: [`'none'`],
       manifestSrc: [`'self'`]
     }
+  },
+  referrerPolicy: {
+    policy: 'no-referrer'
   }
 })))