Security guides your team can ship this week

The Referer header silently leaks URL fragments, session tokens, and user paths to third parties on every navigation. The Referrer-Policy header gives you precise control over what gets shared — and most sites are using the wrong setting.