Security Headers
Referrer-Policy check
Controls how much of your page addresses leak to other sites when visitors click a link.
Check this on your own domain now. It is free with a DomainGuard account, reads only public records, and gives you a report you can send to whoever runs your website.
What we look at
We read the Referrer-Policy header.
Why it matters to your business
Without a policy, full page addresses (which can include search terms, order numbers or reset tokens) can be passed to every third-party site your pages link to or load from.
How to fix it
- Send Referrer-Policy: strict-origin-when-cross-origin.
If you would rather not touch DNS or server settings yourself, forward this page and your report to whoever manages your website, or ask us to do it.