diff options
| author |  Alexandre Alapetite <alexandre@alapetite.fr>
| 2016-08-13 19:20:36 +0200 |
|---|---|---|
| committer |  GitHub <noreply@github.com>
| 2016-08-13 19:20:36 +0200 |
| commit | 7eab5a3a69d0a1ca0812c78a00fb353731ae14a7 (patch) | |
| tree | 36fea769271878d2ad9927a26cb25aa53a799207 /app/layout/layout.phtml | |
| parent | 97efdcac1e38c568b6be313120694e7201d4c69c (diff) | |
| parent | b3963f6ed6316745593da8a68116006a179a817e (diff) | |
Merge pull request #1210 from Alkarex/csrf-token
CSRF token, update HTTP Referrer policy to same-origin
Diffstat (limited to 'app/layout/layout.phtml')
| -rw-r--r-- | app/layout/layout.phtml | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/app/layout/layout.phtml b/app/layout/layout.phtml index 2aeba40a9..189d93fbe 100644 --- a/app/layout/layout.phtml +++ b/app/layout/layout.phtml @@ -42,7 +42,7 @@ ?> <link rel="alternate" type="application/rss+xml" title="<?php echo $this->rss_title; ?>" href="<?php echo Minz_Url::display($url_rss); ?>" /> <?php } if (!FreshRSS_Context::$system_conf->allow_referrer) { ?> - <meta name="referrer" content="origin" /> + <meta name="referrer" content="never" /> <?php } if (FreshRSS_Context::$system_conf->allow_robots) { ?> <meta name="description" content="<?php echo htmlspecialchars(FreshRSS_Context::$name . ' | ' . FreshRSS_Context::$description, ENT_COMPAT, 'UTF-8'); ?>" /> <?php } else { ?> |