I'm not sure how can I add referrer policy header to my virtual host configuration file.

Let's say that I want to add something like this Referrer-Header: same-origin, should it be in this way:

Header set Referrer-Header: same-origin

The header you're looking for is called Referrer-Policy, not "Referrer-Header".

As such, the correct way to set it would be:

Header always set Referrer-Policy "same-origin"

Not sure what you are asking, or trying to accomplish here...

SAMEORIGIN is a value for the X-Frame-Options header.

To make Apache send this header to all your pages, you would need to add this directive to your site config file :

Header always append X-Frame-Options SAMEORIGIN



  • Referrer-Policy is different than X-Frame-Options. See: w3.org/TR/referrer-policy – iglvzx Jan 23 '18 at 21:59
  • @iglvzx Thank you. I've got it since this post has been published. – krisFR Jan 23 '18 at 22:18

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.