Merge branch 'only-send-one-referrer-policy-header' into 'master'

Only send one Referrer-Policy header

Closes gitlab#32766

See merge request gitlab-org/omnibus-gitlab!4584

changelogs/unreleased/only-send-one-referrer-policy-header.yml

+---
+title: Only send one Referrer-Policy header
+merge_request: 4584
+author:
+type: changed

files/gitlab-cookbooks/gitlab/templates/default/nginx-gitlab-http.conf.erb

@@ -119,6 +119,9 @@ server {
   <% end %>
   <% if @referrer_policy %>
+  # Rails sets a default policy of strict-origin-when-cross-origin, so
+  # hide that and just send the one we've configured for nginx
+  proxy_hide_header Referrer-Policy;
   add_header Referrer-Policy <%= @referrer_policy %>;
   <% end %>