From 70a5034874dc305fe89dbe3f08da39e6539df4a8 Mon Sep 17 00:00:00 2001
From: Marcel Hellkamp <marc@gsites.de>
Date: Mon, 12 Feb 2024 19:53:33 +0100
Subject: [PATCH] Do not send full referrers.

Wall configuration is part of the URL and may contain details that should not be sent to other servers. We still want to be honest about the source of e.g. API requests or media traffic.
---
 index.html | 1 +
 1 file changed, 1 insertion(+)

diff --git a/index.html b/index.html
index aa1083c..51b9fc8 100644
--- a/index.html
+++ b/index.html
@@ -6,6 +6,7 @@
     <link rel='shortcut icon' type='image/svg+xml' href='/favicon.svg'>
     <link rel='shortcut icon' type='image/vnd.microsoft.icon' href='/favicon.ico'>
     
+    <meta name="referrer" content="origin-when-cross-origin" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <title>Fediwall</title>
   </head>