fix(gatsby-plugin-netlify): Add Referrer-Policy to security headers (#13452)

browniebroke · sidharthachatterjee · commit 871923a6c889 · 2019-04-18T22:24:09.000+05:30
diff --git a/packages/gatsby-plugin-netlify/src/constants.js b/packages/gatsby-plugin-netlify/src/constants.js
@@ -21,6 +21,7 @@ export const SECURITY_HEADERS = {
     `X-Frame-Options: DENY`,
     `X-XSS-Protection: 1; mode=block`,
     `X-Content-Type-Options: nosniff`,
+    `Referrer-Policy: same-origin`,
   ],
 }
 

Original file line number	Diff line number	Diff line change
`@@ -21,6 +21,7 @@ export const SECURITY_HEADERS = {`
`21`	`21`	`X-Frame-Options: DENY`,
`22`	`22`	`X-XSS-Protection: 1; mode=block`,
`23`	`23`	`X-Content-Type-Options: nosniff`,
	`24`	+ `Referrer-Policy: same-origin`,
`24`	`25`	`],`
`25`	`26`	`}`
`26`	`27`