diff --git a/mediagoblin/config_spec.ini b/mediagoblin/config_spec.ini index fd86700a..0a8da73e 100644 --- a/mediagoblin/config_spec.ini +++ b/mediagoblin/config_spec.ini @@ -86,6 +86,9 @@ allow_attachments = boolean(default=False) # Cookie stuff csrf_cookie_name = string(default='mediagoblin_csrftoken') +# Set to true to prevent browsers leaking information through Referrers +no_referrer = boolean(default=True) + # Push stuff push_urls = string_list(default=list()) diff --git a/mediagoblin/templates/mediagoblin/base.html b/mediagoblin/templates/mediagoblin/base.html index ddc38b3e..778cc3f9 100644 --- a/mediagoblin/templates/mediagoblin/base.html +++ b/mediagoblin/templates/mediagoblin/base.html @@ -27,6 +27,9 @@ + {% if app_config['no_referrer'] -%} + + {%- endif %} {% block title %}{{ app_config['html_title'] }}{% endblock %}