From 348c53b13602288ebe0b2280ac5543d343db4722 Mon Sep 17 00:00:00 2001
From: Aleksander Machniak <alec@alec.pl>
Date: Tue, 01 Sep 2015 13:51:44 -0400
Subject: [PATCH] Add example of setting CSP's no-referer policy

---
 .htaccess |    2 ++
 1 files changed, 2 insertions(+), 0 deletions(-)

diff --git a/.htaccess b/.htaccess
index c584ac0..a2b516c 100644
--- a/.htaccess
+++ b/.htaccess
@@ -46,6 +46,8 @@
 <IfModule mod_headers.c>
 # replace 'append' with 'merge' for Apache version 2.2.9 and later
 #Header append Cache-Control public env=!NO_CACHE
+# for better privacy/security ask browsers to not set the Referer
+#Header set Content-Security-Policy "referrer no-referrer"
 </IfModule>
 
 <IfModule mod_expires.c>

--
Gitblit v1.9.1