From a7e4bb14605ab0409c9300fdc6588db623eb323e Mon Sep 17 00:00:00 2001
From: Paul Norman <penorman@mac.com>
Date: Sun, 19 Jul 2026 00:48:55 -0700
Subject: [PATCH] Set referrer-policy on embed page

---
 cookbooks/web/templates/default/apache.frontend.erb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/cookbooks/web/templates/default/apache.frontend.erb b/cookbooks/web/templates/default/apache.frontend.erb
index 98168ddc6..f105236e5 100644
--- a/cookbooks/web/templates/default/apache.frontend.erb
+++ b/cookbooks/web/templates/default/apache.frontend.erb
@@ -174,6 +174,7 @@ ErrorLog /var/log/apache2/error.log
   #
   <Location /export/embed.html>
     ExpiresDefault "access plus 7 days"
+    Header always set Referrer-Policy "no-referrer-when-downgrade"
   </Location>
   <Location /images/>
     ExpiresDefault "access plus 10 years"
-- 
2.47.3