Fix Guide
How to Fix a Missing Referrer-Policy Header
The response does not define how much referrer information browsers may send to other sites.
Recommended fix
Add a Referrer-Policy header that limits cross-origin leakage while preserving useful analytics.
This guide is designed to pair with a scanner report. Run a URL scan first, then copy the fix list to your developer or CMS workflow.
Developer task
Set Referrer-Policy: strict-origin-when-cross-origin at the CDN or server layer.