The "Referrer-Policy" HTTP header is not set to "no-referrer"

ℹ️ Support
,
43

So that I can remember for the future, here is what I did to correct this problem (I am running Ubuntu 16.04):

  1. In /var/www/html/nextcloud/.htacess, I commented out: Header set Referrer-Policy "no-referrer"

  2. In /etc/apache2/apache2.conf, I have the following:

<IfModule mod_headers.c>

Header always add Strict-Transport-Security "max-age=15768000; includeSubDomains; preload"

Header always set Referrer-Policy "no referrer"

Header always set Referrer-Policy "strict-origin"

</IfModule>

This removes the warning.

I hope that this is helpful to someone.