Ability to set Referrer-Policy and Permissions-Policy security headers

New Member
1 0 0

Hello, our compliance department has identified that our store on Shopify is missing two important security headers:

  • Referrer-Policy, and
  • Permissions-Policy

They are requesting that we fix that in a shortest amount of time. However, I haven't found a way to set those anywhere inside Shopify Admin site. Setting those headers inside template does not have any effect as well, because these are server side headers, and need to be set on the server side.

Please advise how can a Shopify store owner configure the required security headers, or when Shopify will start supporting the above mentioned 2 security headers?

Truly hope to hear back from you on this soon.