From 99a44f119f6464f70a8ffc4587e97a0a35309495 Mon Sep 17 00:00:00 2001
From: ansuz <ansuz@transitiontech.ca>
Date: Tue, 30 May 2017 10:44:40 +0200
Subject: [PATCH] don't send referrer headers on pads which may link outward

---
 www/code/index.html  | 1 +
 www/pad/index.html   | 1 +
 www/slide/index.html | 1 +
 3 files changed, 3 insertions(+)

diff --git a/www/code/index.html b/www/code/index.html
index 448020d26..4fa11fc33 100644
--- a/www/code/index.html
+++ b/www/code/index.html
@@ -5,6 +5,7 @@
     <meta content="text/html; charset=utf-8" http-equiv="content-type"/>
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <link rel="stylesheet" href="/bower_components/components-font-awesome/css/font-awesome.min.css">
+    <meta name="referrer" content="no-referrer" />
     <script data-bootload="main.js" data-main="/common/boot.js" src="/bower_components/requirejs/require.js"></script>
     <link rel="icon" type="image/png"
         href="/customize/main-favicon.png"
diff --git a/www/pad/index.html b/www/pad/index.html
index 4688001f6..3095c137f 100644
--- a/www/pad/index.html
+++ b/www/pad/index.html
@@ -4,6 +4,7 @@
     <title>CryptPad</title>
     <meta content="text/html; charset=utf-8" http-equiv="content-type"/>
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <meta name="referrer" content="no-referrer" />
     <link rel="stylesheet" href="/bower_components/components-font-awesome/css/font-awesome.min.css">
     <script data-bootload="main.js" data-main="/common/boot.js" src="/bower_components/requirejs/require.js"></script>
     <link rel="icon" type="image/png"
diff --git a/www/slide/index.html b/www/slide/index.html
index faf9bc1c8..2f5e675a9 100644
--- a/www/slide/index.html
+++ b/www/slide/index.html
@@ -4,6 +4,7 @@
     <title>CryptPad</title>
     <meta content="text/html; charset=utf-8" http-equiv="content-type"/>
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <meta name="referrer" content="no-referrer" />
     <script data-bootload="main.js" data-main="/common/boot.js" src="/bower_components/requirejs/require.js"></script>
     <link rel="icon" type="image/png"
         href="/customize/main-favicon.png"