actual security stuff kiss my ass

templates/default.html

@@ -4,6 +4,7 @@
         <meta charset="utf-8">
         <meta http-equiv="x-ua-compatible" content="ie=edge">
         <meta name="viewport" content="width=device-width, initial-scale=1">
+        <meta name="referrer" content="no-referrer">
         <title>rf - $title$</title>
         <link rel="stylesheet" href="/css/default.css" />
         $favicons$