---
sourceDocument: Zurich Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/zurich/platform-security

 Release :

    - zurich

ft:locale :

    - en-US

ft:publication_title :

    - Zurich Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Enforce secure referrer policy \[New in Security Center 1.3\]

# Enforce secure referrer policy \[New in Security Center 1.3\] {#ariaid-title1}

* Release version: Zurich
* 
* Updated July 31, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Use the com.glide.security.referrerpolicy property to ensure that the Referrer-Policy HTTP header sends the appropriate level of data to each ServiceNow® page to prevent data leaks.
When the com.glide.security.referrerpolicy property is set to default, it ensures that the Referrer-Policy HTTP header is managed with the appropriate level of information sent, specifically tailored for the ServiceNow AI Platform® request page. This prevents unauthorized data leaks that could be accessible from other parts of the full URL, such as the path and query string.

## More information {#sc-enforce-secure-referrer-policy__section_qhx_1b1_xwb}

{#sc-enforce-secure-referrer-policy__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | com.glide.security.referrerpolicy |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | string |
| Recommended value | default |
| Default value | default |
| Category | [Configuration](https://www.servicenow.com/docs/gt5R_3vslEdsc0P87Sv4hQ "The Configuration category ensures applications have a secure build environment and hardened third party library components. Specifically, ensuring a build and deploy pipeline is repeatable and includes automated testing and prevents known security issues from being deployed. This includes keeping dependencies up to date and free from known vulnerabilities.") |
| Security risk | * Severity score: 4.3 * CVSS score: Medium * Security risk details: Ensure that the com.glide.security.referrerpolicy property is set to default to prevent leaks of unauthorized data. {#sc-enforce-secure-referrer-policy__ul_g1g_3sf_xwb} |
| Dependencies and prerequisites | None |
| References | [Referrer-Policy](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy) |
| Functional impact | This property controls how much information is sent via the referrer header when a request is sent from a page: * default: Instance will take care of the referrer headers * same-origin: Send full referrer URL within the instance/same domain and no referrer to outside origin * origin: Send only the origin as a referrer inside and outside the origin * origin-when-cross-origin: Send full referrer URL within the instance/same domain and only the origin outside the origin {#sc-enforce-secure-referrer-policy__ul_xtr_4mb_myb} |
[ ]

{#sc-enforce-secure-referrer-policy__table_ajc_b43_3kb}