mirror of
https://github.com/spring-projects/spring-security.git
synced 2025-05-31 09:12:14 +00:00
Merge branch '6.1.x'
Closes gh-13591
This commit is contained in:
commit
c3d28a72a2
@ -448,8 +448,8 @@ fun webFilterChain(http: ServerHttpSecurity): SecurityWebFilterChain {
|
|||||||
[[webflux-headers-referrer]]
|
[[webflux-headers-referrer]]
|
||||||
== Referrer Policy
|
== Referrer Policy
|
||||||
|
|
||||||
By default, Spring Security does not add xref:features/exploits/headers.adoc#headers-referrer[Referrer Policy] headers.
|
Spring Security adds the xref:features/exploits/headers.adoc#headers-referrer[Referrer Policy] header by default with the directive `no-referrer`.
|
||||||
You can enable the Referrer Policy header using configuration as shown below:
|
You can change the Referrer Policy header using configuration as shown below:
|
||||||
|
|
||||||
.Referrer Policy Configuration
|
.Referrer Policy Configuration
|
||||||
[tabs]
|
[tabs]
|
||||||
|
Loading…
x
Reference in New Issue
Block a user