Referrer-Policy Header Not Present In Response From Portal

Products

• CA API Developer Portal

Issue/Introduction

When hitting the portal with a command such as the following we notice that no Referrer-Policy header is returned in the response:

curl -I https://PortalHostName

 

We would like to see the following kind of header returned from the portal in order to increase security:

Referrer-Policy: same-origin

Environment

CA API Developer Portal

Resolution

We have made changes such that a Referrer-Policy header will be present in responses from the portal.  These changes will be included as of Portal release 5.2

Additional Information

DE537340