fix: add Referrer-Policy to prevent merge token leakage via Referer header

This commit is contained in:
Fringg
2026-03-04 16:14:51 +03:00
parent 8ad0500cc8
commit 584f00297b

View File

@@ -11,6 +11,7 @@
<meta name="mobile-web-app-capable" content="yes" />
<meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" />
<meta name="format-detection" content="telephone=no" />
<meta name="referrer" content="strict-origin-when-cross-origin" />
<title>Loading...</title>
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />