diff options
| author | Patricio Cano <suprnova32@gmail.com> | 2015-09-08 20:28:28 +0300 |
|---|---|---|
| committer | Patricio Cano <suprnova32@gmail.com> | 2015-09-08 20:28:28 +0300 |
| commit | 983a102bd028bf7a6335b6674059eb004d4171f3 (patch) | |
| tree | 0cc571a6cdc1068cc99cc95f32bda2eb444972b6 /app/views | |
| parent | 86556a079e34eb1267e63f7b39cc018665e21bfc (diff) | |
Added meta tag for referrer, so that only the origin is sent to third party sites, instead of the entire URL, thus avoiding the leak of sensitive information like password reset tokens.
Diffstat (limited to 'app/views')
| -rw-r--r-- | app/views/layouts/_head.html.haml | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/app/views/layouts/_head.html.haml b/app/views/layouts/_head.html.haml index 397649dacf8..c3b137e3ddf 100644 --- a/app/views/layouts/_head.html.haml +++ b/app/views/layouts/_head.html.haml @@ -3,6 +3,7 @@ %meta{charset: "utf-8"} %meta{'http-equiv' => 'X-UA-Compatible', content: 'IE=edge'} %meta{content: "GitLab Community Edition", name: "description"} + %meta{name: 'referrer', content: 'origin'} %title= page_title |