Added Referrer-Policy HTTP Security Header for Nextcloud Nginx.

nextcloud/rootfs/nginx/sites-enabled/nginx.conf

@@ -10,6 +10,7 @@ server {
         add_header X-Robots-Tag none;
         add_header X-Download-Options noopen;
         add_header X-Permitted-Cross-Domain-Policies none;
+        add_header Referrer-Policy "same-origin";
 
         location = /robots.txt {
             allow all;