How can I add in apache referrer policy header?

Question

I'm not sure how can I add referrer policy header to my virtual host configuration file.

Let's say that I want to add something like this Referrer-Header: same-origin, should it be in this way:

Header set Referrer-Header: same-origin

score 22 · Accepted Answer · answered Oct 29 '17 at 21:38

22

The header you're looking for is called Referrer-Policy, not "Referrer-Header".

As such, the correct way to set it would be:

Header always set Referrer-Policy "same-origin"

answered Oct 29 '17 at 21:38

score 1 · Answer 2 · answered Oct 29 '17 at 18:51

1

Not sure what you are asking, or trying to accomplish here...

SAMEORIGIN is a value for the X-Frame-Options header.

To make Apache send this header to all your pages, you would need to add this directive to your site config file :

Header always append X-Frame-Options SAMEORIGIN

answered Oct 29 '17 at 18:51

krisFR

Referrer-Policy is different than X-Frame-Options. See: https://www.w3.org/TR/referrer-policy/ – iglvzx Jan 23 '18 at 21:59
@iglvzx Thank you. I've got it since this post has been published. – krisFR Jan 23 '18 at 22:18

2 Answers2