webzod
account

Set a valid Referrer-Policy on WordPress

headers.referrer.invalid · effort: minutes

Why it matters

The Referrer-Policy value is not one browsers recognise, so they ignore it and use their own default. Use a standard value such as strict-origin-when-cross-origin.

The fix

  1. Find the plugin, theme or server rule that sets Referrer-Policy and correct its value to strict-origin-when-cross-origin.
  2. Clear page caches and check the header again.

Read the documentation (opens in a new tab)

Related

Scan your domain to see whether this applies to you.