Navigating to third-party links from secure areas can leak sensitive tokens, IDs, or search queries contained in the URL via the HTTP Referer header.
To resolve this vulnerability, follow these config changes or developer practices:
After applying the remediation, run an external attack-surface scan to verify that the vulnerability is no longer detected by WebScanify.
Run a free security scan now to identify missing headers, outdated JS, and other deployment vulnerabilities.