Enable no-referrer on img tags, enable strict-origin-when-cross-origin by default

Fixes #3889 Signed-off-by: Kevin Decherf <kevin@kdecherf.com>
2019-05-01 14:05:38 +02:00
parent 570113208b
commit 2dbb5b2307
2 changed files with 2 additions and 0 deletions
--- a/src/Wallabag/CoreBundle/Resources/views/base.html.twig
+++ b/src/Wallabag/CoreBundle/Resources/views/base.html.twig
@ -8,6 +8,7 @@
        {% block head %}
            <meta name="viewport" content="initial-scale=1.0">
            <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
+            <meta name="referrer" content="strict-origin-when-cross-origin">
            <!--[if IE]>
            <meta http-equiv="X-UA-Compatible" content="IE=10">
            <![endif]-->