Missing Referrer-Policy header

Info severity, in the Security tab

Why it matters

Without a referrer policy, full URLs may leak to third parties in the Referer header.

How to fix it

Add Referrer-Policy: strict-origin-when-cross-origin.

How Crawlune finds it

Crawlune flags Missing Referrer-Policy header automatically on every crawl and lists the affected URLs under the Security tab, where you can filter, inspect each page and export the list to CSV. The free version crawls up to 550 URLs with every check enabled.