From d8906b2cb60d658dd9a76abf445af9a5d804cda1 Mon Sep 17 00:00:00 2001
From: Nolan Lawson <nolan@nolanlawson.com>
Date: Thu, 19 Apr 2018 21:38:22 -0700
Subject: [PATCH] add Referrer-Policy: no-referrer (#187)

fixes #139
---
 server.js | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/server.js b/server.js
index 697621bff..1859d268d 100644
--- a/server.js
+++ b/server.js
@@ -42,6 +42,9 @@ app.use(nonDebugOnly(helmet({
       objectSrc: [`'none'`],
       manifestSrc: [`'self'`]
     }
+  },
+  referrerPolicy: {
+    policy: 'no-referrer'
   }
 })))