Support Azure by changing header Referer-Policy.

Signed-off-by: Alexander Bij <AlexanderBij@godatadriven.com>
This commit is contained in:
Alexander Bij 2024-03-11 22:01:51 +01:00
parent fbd9c95dc6
commit 40794783f9
3 changed files with 3 additions and 3 deletions

View File

@ -494,7 +494,7 @@ class Header
$headers['X-Frame-Options'] = 'DENY';
}
$headers['Referrer-Policy'] = 'no-referrer';
$headers['Referrer-Policy'] = 'same-origin';
$headers = array_merge($headers, $this->getCspHeaders());

View File

@ -3,7 +3,7 @@
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta name="referrer" content="no-referrer">
<meta name="referrer" content="same-origin">
<meta name="robots" content="noindex,nofollow,notranslate">
<meta name="google" content="notranslate">
{% if not allow_third_party_framing -%}

View File

@ -162,7 +162,7 @@ class HeaderTest extends AbstractTestCase
$expected = [
'X-Frame-Options' => $expectedFrameOptions,
'Referrer-Policy' => 'no-referrer',
'Referrer-Policy' => 'same-origin',
'Content-Security-Policy' => $expectedCsp,
'X-Content-Security-Policy' => $expectedXCsp,
'X-WebKit-CSP' => $expectedWebKitCsp,