use strict-origin-when-cross-origin Referrer-Policy (#17382)

1 files changed, 1 insertions, 1 deletions

diff --git a/core/View.php b/core/View.php
index 707030b2c3..9429f9e1c7 100644
--- a/core/View.php
+++ b/core/View.php
@@ -296,7 +296,7 @@ class View implements ViewInterface
                 Common::sendHeader('Referrer-Policy: same-origin');
             } else {
                 // always send explicit default header
-                Common::sendHeader('Referrer-Policy: no-referrer-when-downgrade');
+                Common::sendHeader('Referrer-Policy: strict-origin-when-cross-origin');
             }
         }