mirror of
https://github.com/discourse/discourse.git
synced 2025-03-09 14:34:35 +00:00
Rails already ships with strict-origin-when-cross-origin, no need to also add no-referrer-when-downgrade see: https://meta.discourse.org/t/harden-referrer-policy-header/100172