Is there a way to disable referrer?

[Gerard64]

Is there a way to disable referrer?
My domain name is resolvable locally but also on the public internet.

I assume wen i click on a link in Linkding the server on the other side will see the referrer.
If so can this be disabled?

[FireFingers21]

You should be able to customize the Django Referrer Policy settings using the SECURE_REFERRER_POLICY environment variable using the method described in Issue #960.

I did this myself, although I used it with the CSRF_COOKIE_SECURE variable to enforce HTTPS on linkding's browser cookies.

[Gerard64]

@FireFingers21

Thank you, for your advise and links.
I am going to study this and test it.

[huyz]

@Gerard64 please post the details of your solution if you figure it out

[Gerard64]

The default referrer-policy header of linkding is set to same-origin.

When i click on a bookmark to a webserver i manage i see there is no referrer back to my linkding system.
In one of the links of @FireFingers21 i read this:

I think this says exactly what i see with my test and what i want. Remote sites can not see where i am coming from.

When i click on a link of linkding itself inside for example the setup page then i do see a referrer to linkding in the logs of my apache proxy server.

So for me personally referrer-policy: same-origin is great and good as it is.

[sissbruecker]

Referrer should already be disabled for outgoing links with the Referrer-Policy HTTP header.