add_action('send_headers', function() { header('Referrer-Policy: strict-origin'