mirror of
https://github.com/spring-projects/spring-security.git
synced 2025-05-31 01:02:14 +00:00
Merge branch '5.8.x' into 6.0.x
Closes gh-13589
This commit is contained in:
commit
461d6edd85
@ -448,8 +448,8 @@ fun webFilterChain(http: ServerHttpSecurity): SecurityWebFilterChain {
|
|||||||
[[webflux-headers-referrer]]
|
[[webflux-headers-referrer]]
|
||||||
== Referrer Policy
|
== Referrer Policy
|
||||||
|
|
||||||
By default, Spring Security does not add xref:features/exploits/headers.adoc#headers-referrer[Referrer Policy] headers.
|
Spring Security adds the xref:features/exploits/headers.adoc#headers-referrer[Referrer Policy] header by default with the directive `no-referrer`.
|
||||||
You can enable the Referrer Policy header using configuration as shown below:
|
You can change the Referrer Policy header using configuration as shown below:
|
||||||
|
|
||||||
.Referrer Policy Configuration
|
.Referrer Policy Configuration
|
||||||
[tabs]
|
[tabs]
|
||||||
|
Loading…
x
Reference in New Issue
Block a user