Referrer-Policy Header Missing

No Comments

Element Code: SE-005

Quick Reference

Issue: No Referrer-Policy header to control referrer information sharing

Impact: Full URLs including query strings may leak to third parties

Fix: Add Referrer-Policy header with appropriate policy

Detection: HTTP header inspection

What Is This Issue?

Without Referrer-Policy, browsers send full referrer information to other sites. This can leak sensitive data in URLs like session IDs or search queries.

Why This Matters for Your Website

URL leakage can expose private information. A proper referrer policy protects user privacy and your internal URL structure.

How to Fix This Issue

  1. Add header: Referrer-Policy: strict-origin-when-cross-origin
  2. Options: no-referrer, same-origin, strict-origin, etc.
  3. Balance: Too strict breaks some analytics

Tools for Detection

  • Security headers check: Verify referrer policy

TL;DR (The Simple Version)

Add a Referrer-Policy header to control what URL information is shared with other sites. This protects user privacy and prevents URL data leakage.

About SEO ProCheck

Technical SEO consulting and GEO strategy with 20 years of enterprise experience. Case studies, resources, and tools for search and AI visibility.

Work With Me

Technical SEO audits, GEO strategy, site migrations, and international SEO. Hourly consulting for teams who need hands-on support, not just reports.

Subscribe to our newsletter!

More from our blog