diff --git a/app.json b/app.json
index 9168973ca3e..22595de4c22 100644
--- a/app.json
+++ b/app.json
@@ -37,6 +37,7 @@
     "NPM_CONFIG_PRODUCTION": "true",
     "REVIEW_APP": "True",
     "SECURE_CROSS_ORIGIN_OPENER_POLICY": "same-origin-allow-popups",
+    "SECURE_REFERRER_POLICY": "strict-origin-when-cross-origin",
     "XROBOTSTAG_ENABLED": "True"
   },
   "buildpacks": [