Checks · security

Missing Referrer-Policy Header

Opportunity security.missing_referrer_policy

What it means

Without a Referrer-Policy the full URL of this page, query string included, is sent to every site it links to.

How to fix it

Send Referrer-Policy: strict-origin-when-cross-origin, which is what browsers default to when told nothing but is worth stating.

Where to find it in Truelint

Open the Issues pane on the right of the workspace and select Missing Referrer-Policy Header. The grid filters to every affected URL and the detail pane shows the specific finding for each. Export the list with Export → Current view, or from the API:

GET /api/v1/crawls/{handle}/issues/security.missing_referrer_policy