Set a Referrer-Policy header

Custom header:
  Name: Referrer-Policy
  Value: strict-origin-when-cross-origin
  Override origin: Yes

{
  "headers": [
    {
      "source": "/(.*)",
      "headers": [
        { "key": "Referrer-Policy", "value": "strict-origin-when-cross-origin" }
      ]
    }
  ]
}

[[headers]]
  for = "/*"
  [headers.values]
    Referrer-Policy = "strict-origin-when-cross-origin"

add_header Referrer-Policy "strict-origin-when-cross-origin" always;

Header always set Referrer-Policy "strict-origin-when-cross-origin"

header Referrer-Policy "strict-origin-when-cross-origin"

// next.config.js
module.exports = {
  async headers() {
    return [{
      source: "/(.*)",
      headers: [
        { key: "Referrer-Policy", value: "strict-origin-when-cross-origin" },
      ],
    }];
  },
};

// Using helmet (recommended)
const helmet = require("helmet");
app.use(helmet());

// Or manually
app.use((req, res, next) => {
  res.setHeader("Referrer-Policy", "strict-origin-when-cross-origin");
  next();
});

# settings.py
SECURE_REFERRER_POLICY = 'strict-origin-when-cross-origin'

// app/Http/Middleware/SecurityHeaders.php
public function handle($request, Closure $next)
{
    $response = $next($request);
    $response->headers->set('Referrer-Policy', 'strict-origin-when-cross-origin');
    return $response;
}

# config/application.rb
config.action_dispatch.default_headers.merge!(
  'Referrer-Policy' => 'strict-origin-when-cross-origin'
)

@Bean
SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
    http.headers(h -> h
        .addHeaderWriter(new StaticHeadersWriter("Referrer-Policy", "strict-origin-when-cross-origin"))
    );
    return http.build();
}

# .htaccess (Apache)
Header always set Referrer-Policy "strict-origin-when-cross-origin"

# Or in functions.php
add_action('send_headers', function() {
    header('Referrer-Policy: strict-origin-when-cross-origin');
});

// nuxt.config.ts
export default defineNuxtConfig({
  routeRules: {
    '/**': {
      headers: { 'Referrer-Policy': 'strict-origin-when-cross-origin' },
    },
  },
});

app.Use(async (context, next) =>
{
    context.Response.Headers.Append("Referrer-Policy", "strict-origin-when-cross-origin");
    await next();
});