mirror of
https://github.com/discourse/discourse.git
synced 2025-02-06 11:28:18 +00:00
Rails already ships with strict-origin-when-cross-origin, no need to also add no-referrer-when-downgrade see: https://meta.discourse.org/t/harden-referrer-policy-header/100172