No Referrer-Policy
WarningLow priority
Pages of this site whose response does not send a Referrer-Policy.
Why it matters
Without one, older browsers send the full address of the page to every site it links to, including anything private in its path or query.
How to fix it
Send Referrer-Policy: strict-origin-when-cross-origin, or something stricter.
Skitter runs this check on every crawl, and lists each page it finds with the evidence: the header, the tag or the link that gave it away.