diff --git a/controllers/common.php b/controllers/common.php
index 07c3104..35a18aa 100644
--- a/controllers/common.php
+++ b/controllers/common.php
@@ -50,6 +50,7 @@ Router\before(function($action) {
         'media-src' => '*',
         'img-src' => '*',
         'frame-src' => Model\Config\get_iframe_whitelist(),
+        'referrer' => 'no-referrer',
     ));
 
     Response\xframe();