Use destination based redirect instead of $_SERVER['HTTP_REFERER']

Good idea!

Any chance you could give this a try for an MR?

How you add that policy header? Contrib module?

You can add in .htaccess file under <IfModule mod_headers.c> below line.

Header always set Referrer-Policy 'no-referrer'

Sure I will work on MR

vipul tulse → closed merge request !6

Hello @norman.lol
Please review MR and approve.