Remove django-referrer-policy dependency

nickmoreton · nickmoreton · commit 986b6ecc0489 · 2025-03-27T17:22:26.000Z
diff --git a/poetry.lock b/poetry.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -22,7 +22,6 @@ django-pattern-library = "^1.3.0"
 django-permissions-policy = "^4.22.0"
 django-phonenumber-field = "^8.0.0"
 django-redis = "^5.4.0"
-django-referrer-policy = "~1.0"
 django-storages = {version = "^1.14.4", extras = ["boto3"]}
 dj-database-url = "^2.3.0"
 
diff --git a/tbx/settings/base.py b/tbx/settings/base.py
@@ -424,6 +424,10 @@
 # https://docs.djangoproject.com/en/stable/ref/settings/#secure-content-type-nosniff
 SECURE_CONTENT_TYPE_NOSNIFF = True
 
+# https://docs.djangoproject.com/en/stable/ref/middleware/#referrer-policy
+SECURE_REFERRER_POLICY = env.get(
+    "SECURE_REFERRER_POLICY", "no-referrer-when-downgrade"
+).strip()
 
 # Content Security policy settings
 # http://django-csp.readthedocs.io/en/latest/configuration.html
