Best Practices for Referrer-Policy Header

Referrer Policy Options

Referrer-Policy: no-referrer

Referrer-Policy: no-referrer-when-downgrade

Referrer-Policy: origin

Referrer-Policy: strict-origin

Referrer-Policy: strict-origin-when-cross-origin

Implementation Considerations

• Analytics Impact: Some analytics tools need referrer data
• Cross-Origin Resources: May need more permissive policy for CDNs
• Migration Strategy: Start with strict-origin-when-cross-origin

Advanced Techniques

<meta name="referrer" content="strict-origin-when-cross-origin">

<a href="..." referrerpolicy="no-referrer">Link</a>