From 3f4fa29d55fe5a7000a9cfc83e4a7797fd39e414 Mon Sep 17 00:00:00 2001
From: SkateSpots <skatespots>
Date: Mon, 2 Nov 2026 00:36:23 +0700
Subject: [PATCH] fix: send origin referrer to OpenStreetMap

---
 netlify.toml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/netlify.toml b/netlify.toml
index 7dcd8f3..d06f47c 100644
--- a/netlify.toml
+++ b/netlify.toml
@@ -14,7 +14,7 @@
     Content-Security-Policy = "default-src 'none'; script-src 'self' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' https: wss:; media-src 'self' blob: https:; frame-src 'self' https:; worker-src 'self' blob:; manifest-src 'self'; object-src 'none'; base-uri 'none'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests"
     X-Frame-Options = "DENY"
     X-Content-Type-Options = "nosniff"
-    Referrer-Policy = "no-referrer"
+    Referrer-Policy = "strict-origin-when-cross-origin"
     Permissions-Policy = "geolocation=(self), camera=(self), microphone=()"
 
 [[headers]]