django__django-12419

Add secure default SECURE_REFERRER_POLICY / Referrer-policy header

Verdict: the fix is stated in the issue (Tier A).

I propose we change the default for this to "same-origin" to make Django applications leak less information to third party sites.

The text states the fix: “I propose we change the default for this to "same-origin" to make Django applications leak less information to third party sites.”

All SWE-bench Verified tasks · more django/django tasks · How the check works