diff --git a/Apache/SOGo.conf b/Apache/SOGo.conf
index 69f421095..11ef15830 100644
--- a/Apache/SOGo.conf
+++ b/Apache/SOGo.conf
@@ -22,6 +22,9 @@ Alias /SOGo/WebServerResources/ \
     </IfModule>
 </Directory>
 
+# Don't send the Referer header for cross-origin requests
+Header always set Referrer-Policy "same-origin"
+
 ## Uncomment the following to enable proxy-side authentication, you will then
 ## need to set the "SOGoTrustProxyAuthentication" SOGo user default to YES and
 ## adjust the "x-webobjects-remote-user" proxy header in the "Proxy" section