django-referrer-policy
django-referrer-policy copied to clipboard
Note that no-referrer can break CSRF
I discovered this the hard way 😅