<!DOCTYPE html>
<html>
  <head>
    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <title>Aptible Dashboard</title>
    <meta name="description" content="">
    <meta name="viewport" content="width=device-width, initial-scale=1">

    {{content-for 'head'}}

    <link rel="stylesheet" href="assets/vendor.css">
    <link rel="stylesheet" href="assets/diesel.css">

    {{content-for 'head-footer'}}
    <script type="text/javascript" src="//use.typekit.net/hen3udh.js"></script>
    <script type="text/javascript">try{Typekit.load();}catch(e){}</script>
  </head>
  <body>
    {{content-for 'body'}}

    <script src="assets/vendor.js"></script>
    <script src="assets/diesel.js"></script>

    {{content-for 'body-footer'}}

    <div id="IntercomDefaultWidget"></div>
  </body>
</html>

<!DOCTYPE html>
<html>
  <head>
    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="referrer" content="origin">
    <title>Aptible Dashboard</title>
    <meta name="description" content="">
    <meta name="viewport" content="width=device-width, initial-scale=1">

    {{content-for 'head'}}

    <link rel="stylesheet" href="assets/vendor.css">
    <link rel="stylesheet" href="assets/diesel.css">

    {{content-for 'head-footer'}}
    <script type="text/javascript" src="//use.typekit.net/hen3udh.js"></script>
    <script type="text/javascript">try{Typekit.load();}catch(e){}</script>
  </head>
  <body>
    {{content-for 'body'}}

    <script src="assets/vendor.js"></script>
    <script src="assets/diesel.js"></script>

    {{content-for 'body-footer'}}

    <div id="IntercomDefaultWidget"></div>
  </body>
</html>

Set referrer policy to origin-only
Set referrer policy to origin-only

This ensures we don't leak referrers to e.g. analytics third parties,
which is particularly relevant for e.g. pages whose URL includes an
opaque token, such as password recovery pages.
