[NXP-29115] Add default Referrer-Policy header - Nuxeo Issue Tracker

XML

Word

Printable

Tags:
- noRNS
- nxFG
- security
Upgrade notes:
Hide

A new Nuxeo property nuxeo.referrer.policy is available to control the value of the Referrer-Policy HTTP header. The default is:

nuxeo.referrer.policy=strict-origin-when-cross-origin

The header Referrer-Policy and its possible values are described at https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
Show
A new Nuxeo property nuxeo.referrer.policy is available to control the value of the Referrer-Policy HTTP header. The default is: nuxeo.referrer.policy=strict-origin-when-cross-origin The header Referrer-Policy and its possible values are described at https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
Team:
FG
Sprint:
nxFG 11.1.13
Story Points:
1

Add a default Referrer-Policy: strict-origin-when-cross-origin HTTP header on all pages.

The Nuxeo property nuxeo.referrer.policy can be used to override the value.

Is referenced in

PR for master: #4294

Estimated:

Not Specified

Remaining:

Logged: