From 844c6238baf72dfa79ad7e33f2bc1947cbf5b3f5 Mon Sep 17 00:00:00 2001
From: Dylan Hardison <dylan@mozilla.com>
Date: Wed, 9 Mar 2016 22:16:56 -0500
Subject: Bug 1253914 - Cross domain referer leakage when resetting the user
 password

---
 template/en/default/global/header.html.tmpl | 1 +
 1 file changed, 1 insertion(+)

(limited to 'template/en')

diff --git a/template/en/default/global/header.html.tmpl b/template/en/default/global/header.html.tmpl
index 23634ed43..382c72f1d 100644
--- a/template/en/default/global/header.html.tmpl
+++ b/template/en/default/global/header.html.tmpl
@@ -268,6 +268,7 @@
     [% IF allow_mobile && is_mobile_browser %]
       <meta name="viewport" content="width=device-width, initial-scale=1">
     [% END %]
+    <meta name="referrer" content="origin">
     [% Hook.process("additional_header") %]
   </head>
 
-- 
cgit v1.2.3-24-g4f1b