diff --git a/adminer/include/design.inc.php b/adminer/include/design.inc.php
index 2f40866e..f93d81f0 100644
--- a/adminer/include/design.inc.php
+++ b/adminer/include/design.inc.php
@@ -20,7 +20,6 @@ function page_header($title, $error = "", $breadcrumb = array(), $title2 = "") {
-
<?php echo $title_page; ?>
@@ -91,6 +90,7 @@ function page_headers() {
if ($adminer->headers()) {
header("X-Frame-Options: deny"); // ClickJacking protection in IE8, Safari 4, Chrome 2, Firefox 3.6.9
header("X-XSS-Protection: 0"); // prevents introducing XSS in IE8 by removing safe parts of the page
+ header("Referrer-Policy: origin-when-cross-origin");
}
}
diff --git a/plugins/frames.php b/plugins/frames.php
index bb8519d6..f29b60af 100644
--- a/plugins/frames.php
+++ b/plugins/frames.php
@@ -22,6 +22,7 @@ class AdminerFrames {
header("X-Frame-Options: SameOrigin");
}
header("X-XSS-Protection: 0");
+ header("Referrer-Policy: origin-when-cross-origin");
return false;
}