From f6d484b7d12076911ff6bfce6ba5f846a403309f Mon Sep 17 00:00:00 2001
From: Christian Grothoff <christian@grothoff.org>
Date: Sat, 9 Sep 2017 22:46:09 +0200
Subject: django needs same-origin

---
 etc/nginx/conf.d/talerssl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'etc/nginx/conf.d/talerssl')

diff --git a/etc/nginx/conf.d/talerssl b/etc/nginx/conf.d/talerssl
index f4d39d9..e5d5411 100644
--- a/etc/nginx/conf.d/talerssl
+++ b/etc/nginx/conf.d/talerssl
@@ -11,4 +11,4 @@ add_header X-XSS-Protection "1; mode=block";
 add_header X-Frame-Options "SAMEORIGIN";
 add_header X-Content-Type-Options "nosniff";
 add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; connect-src 'self' wss://buildbot.taler.net";
-add_header Referrer-Policy "no-referrer";
+add_header Referrer-Policy "same-origin";
-- 
cgit v1.2.3