diff --git a/config/environments/production.rb b/config/environments/production.rb index abb46bd1673710e2fb596bb73a8828087c5b925b..99c9bb40c542c24609229e4f4029efab779bbef3 100644 --- a/config/environments/production.rb +++ b/config/environments/production.rb @@ -138,7 +138,7 @@ Rails.application.configure do 'X-Content-Type-Options' => 'nosniff', 'X-XSS-Protection' => '0', 'Permissions-Policy' => 'interest-cohort=()', - 'Referrer-Policy' => 'no-referrer', + 'Referrer-Policy' => 'same-origin', } config.x.otp_secret = ENV.fetch('OTP_SECRET')