diff options
Diffstat (limited to 'p')
| -rw-r--r-- | p/.htaccess | 1 | ||||
| -rw-r--r-- | p/ext.php | 1 |
2 files changed, 2 insertions, 0 deletions
diff --git a/p/.htaccess b/p/.htaccess index e7376e46e..8459fe604 100644 --- a/p/.htaccess +++ b/p/.htaccess @@ -41,6 +41,7 @@ AddDefaultCharset UTF-8 Header merge Cache-Control "public" </FilesMatch> Header edit Set-Cookie ^(.*)$ "$1; SameSite=Lax" + Header set Referrer-Policy "same-origin" </IfModule> # Provide the true IP address of the connection (e.g. last proxy), even when using mod_remoteip @@ -112,6 +112,7 @@ if (!is_valid_path($absolute_filename)) { $content_type = SUPPORTED_TYPES[$file_type]; header("Content-Type: {$content_type}"); header("Content-Disposition: inline; filename='{$file_name}'"); +header('Referrer-Policy: same-origin'); $mtime = @filemtime($absolute_filename); if ($mtime === false) { |