Atur Referrer-Policy
Header web · sekitar 5 menit
Dengan bahasa sederhana
Saat pengunjung mengklik tautan ke situs lain, browser bisa mengirim alamat lengkap halaman asal — termasuk token atau kata kunci pencarian di URL.
Apa risikonya
Token reset password, path internal, atau data pribadi di URL bisa bocor ke pihak ketiga.
Cara memperbaikinya
Pilih platform yang dipakai situs Anda. Tidak yakin? Teruskan halaman ini ke pengelola website Anda.
Nginx
# inside the server { } block
add_header Referrer-Policy "strict-origin-when-cross-origin" always;Apache / .htaccess
<IfModule mod_headers.c>
Header always set Referrer-Policy "strict-origin-when-cross-origin"
</IfModule>Cloudflare
Rules → Transform Rules → Modify Response Header
Set static: Referrer-Policy = strict-origin-when-cross-origin
# Cloudflare Pages: add to public/_headers
/*
Referrer-Policy: strict-origin-when-cross-originVercel
// vercel.json
{ "headers": [ { "source": "/(.*)", "headers": [
{ "key": "Referrer-Policy", "value": "strict-origin-when-cross-origin" }
] } ] }Netlify
# public/_headers
/*
Referrer-Policy: strict-origin-when-cross-originWordPress
// functions.php (child theme) — or use your security plugin's "HTTP headers" setting
add_action('send_headers', function () {
header('Referrer-Policy: strict-origin-when-cross-origin');
});Pastikan sudah berhasil
Jalankan ulang cek ProbeHunt.