move noreferrer policy to hardend mode

This probably fixes #143
splitbrain · Mar 24, 2024 · 08b6034 · 08b6034
1 parent 0521e21
commit 08b6034
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/syntax/video.php b/syntax/video.php
@@ -139,7 +139,6 @@ public function iframe($data, $element = 'iframe')
             'frameborder' => 0,
             'scrolling' => 'no',
             'data-domain' => $data['domain'],
-            'referrerpolicy' => 'no-referrer',
             'loading' => 'lazy',
         ];
         if ($this->getConf('extrahard')) {
@@ -297,7 +296,8 @@ protected function hardenedIframeAttributes()
             'credentialless' => '',
             'sandbox' => 'allow-scripts allow-same-origin',
             'allow' => $disallow,
-            'csp' => 'sandbox allow-scripts allow-same-origin'
+            'csp' => 'sandbox allow-scripts allow-same-origin',
+            'referrerpolicy' => 'no-referrer',
         ];
     }
 }