Always send a referrer-policy header (#15673)

1 files changed, 3 insertions, 0 deletions

diff --git a/core/View.php b/core/View.php
index 1424736fc4..fba7366e4c 100644
--- a/core/View.php
+++ b/core/View.php
@@ -287,6 +287,9 @@ class View implements ViewInterface
         // don't send Referer-Header for outgoing links
         if (!empty($this->useStrictReferrerPolicy)) {
             Common::sendHeader('Referrer-Policy: same-origin');
+        } else {
+            // always send explicit default header
+            Common::sendHeader('Referrer-Policy: no-referrer-when-downgrade');
         }
 
         return $this->renderTwigTemplate();