{"id":"ia.referrer-policy","name":"Referrer-Policy","verify":{"command":"curl -sI https://{domain}/","rescan":"isagentready results {domain} --checkpoint ia.referrer-policy","expect":"A Referrer-Policy header"},"fix":{"steps":[{"action":"Add the header to all responses.","order":1,"language":"nginx","code_example":"add_header Referrer-Policy \"strict-origin-when-cross-origin\" always;"}],"summary":"Send Referrer-Policy: strict-origin-when-cross-origin or stricter.","skill":{"name":"security-trust","anchor":"ia.referrer-policy"}},"category":"security","aggregate":null,"references":[{"title":"MDN: Referrer-Policy","kind":"guide","url":"https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy"}],"stage":"read","lifecycle":{"introduced":"2026-08-24","revised":[],"retired":null,"replaced_by":null},"methodology_version":"2026-10-22","evidence_tier":"standard","evidence_source":{"title":"MDN: Referrer-Policy","url":"https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy"},"why":"Referrer-Policy controls what URL information is shared when users navigate away from your site. A strict policy protects user privacy and prevents leaking sensitive URL parameters.","profiles":["browser_agent_usability","api_tool_readiness","agentic_commerce"],"score_role":"core","legacy_id":"5.9","i18n":{"nl":{"name":"Referrer-Policy","steps":["Voeg de header toe aan alle responses."],"why":"Referrer-Policy bepaalt welke URL-informatie wordt gedeeld als gebruikers je site verlaten. Een strikte policy beschermt privacy en lekt geen gevoelige URL-parameters.","fix_summary":"Stuur Referrer-Policy: strict-origin-when-cross-origin of strikter.","verify_expect":"Een Referrer-Policy-header"}},"ar_practice_ids":[],"strength":"MUST","ar_mapping":"none","evidence_type":"recommendation","detail_url":"https://isagentready.com/en/methodology/checkpoints/ia.referrer-policy","maturity":"essential","applicability":{"mode":"always","condition":null,"surfaces":["website"]}}