Merge remote-tracking branch 'origin/QA_4_7' into QA_4_7

ChangeLog

@@ -86,6 +86,7 @@ phpMyAdmin - ChangeLog
 - issue #13020 Removed warning about client and server versions mismatch
 - issue        Hide comments on table Structure tab when no comment is set
 - issue        Fixed submission of error reports
+- issue #13033 Use Referrer-Policy header to specify referrer policy
 
 4.6.6 (2017-01-23)
 - issue #12759 Fix Notice regarding 'Undefined index: old_usergroup'

libraries/Header.php

@@ -537,6 +537,7 @@ class Header
                 'X-Frame-Options: DENY'
             );
         }
+        header('Referrer-Policy: no-referrer');
         header(
             "Content-Security-Policy: default-src 'self' "
             . $captcha_url
@@ -549,7 +550,6 @@ class Header
             . $captcha_url
             . $GLOBALS['cfg']['CSPAllow']
             . ";"
-            . "referrer no-referrer;"
             . "img-src 'self' data: "
             . $GLOBALS['cfg']['CSPAllow']
             . $map_tile_urls