1 files changed, 4 insertions, 0 deletions
diff --git a/src/main.rs b/src/main.rs
index 73de77d..8005892 100644
--- a/src/main.rs
+++ b/src/main.rs
@@ -240,6 +240,10 @@ async fn service<C: Controller>(
             .parse()
             .unwrap()
         });
+
+    // don't leak the hostname of the GitPad instance when following external links
+    resp.headers_mut()
+        .insert(header::REFERRER_POLICY, "same-origin".parse().unwrap());
     resp
 }