X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Froles%2Ffiles%2Fdebtags%2Fdebtags.debian.org;h=eb8fcf35c2cec5d0e2b36708dc0ffe79d72af7dc;hb=3b29c4516cf2a90765ee8a2609157e502c4f7182;hp=6651b44a3f7b2fd2df8f466275444bfaae97af6c;hpb=be423e937fe155adccdfe3aa46cc8593e699f282;p=mirror%2Fdsa-puppet.git

diff --git a/modules/roles/files/debtags/debtags.debian.org b/modules/roles/files/debtags/debtags.debian.org
index 6651b44a3..eb8fcf35c 100644
--- a/modules/roles/files/debtags/debtags.debian.org
+++ b/modules/roles/files/debtags/debtags.debian.org
@@ -49,6 +49,8 @@ WSGIDaemonProcess debtags.debian.org user=nobody group=debtags home=/ processes=
     WSGIScriptAlias / /srv/debtags.debian.org/debtagsd/debtagsd/wsgi.py
     WSGIProcessGroup debtags.debian.org
     WSGIPassAuthorization On
+
+    Header always set Referrer-Policy "same-origin"
 </VirtualHost>
 
 # vim: syntax=apache ts=4 sw=4 sts=4 sr et