Don't send the Referer header to other origins. (#1092)

Avoid leaking the Home Assistant domain name (which often contains a person's name/alias) in the Referer header for non-same-origin requests.
This commit is contained in:
Matt N 2018-04-17 07:01:00 -07:00 committed by Paulus Schoutsen
parent 8047313165
commit a2ec19e10f

View File

@ -19,6 +19,7 @@
<meta name="msapplication-square310x310logo" content="/static/icons/tile-win-310x310.png"/>
<meta name="msapplication-TileColor" content="#3fbbf4ff"/>
<meta name='mobile-web-app-capable' content='yes'>
<meta name='referrer' content='same-origin'>
<meta name='viewport' content='width=device-width, user-scalable=no'>
<meta name='theme-color' content='{{ theme_color }}'>
<style>