Correct header name spelling

thijskh · thijskh · commit 2b4974560e4d · 2023-09-05T16:33:56.000+02:00
diff --git a/config/config.php.dist b/config/config.php.dist
@@ -276,7 +276,7 @@ $config = [
      * hostname through a security-test like https://en.internet.nl
     'headers.security' => [
         'Content-Security-Policy' => "default-src 'none'; frame-ancestors 'self'; object-src 'none'; script-src 'self'; style-src 'self'; font-src 'self'; connect-src 'self'; img-src 'self' data:; base-uri 'none'",
-        'Referer-Policy' => 'origin-when-cross-origin',
+        'Referrer-Policy' => 'origin-when-cross-origin',
     ],
      */
 
diff --git a/src/SimpleSAML/Configuration.php b/src/SimpleSAML/Configuration.php
@@ -61,7 +61,7 @@ class Configuration implements Utils\ClearableState
             "connect-src 'self'; " .
             "img-src 'self' data:; " .
             "base-uri 'none'",
-        'Referer-Policy' => 'origin-when-cross-origin',
+        'Referrer-Policy' => 'origin-when-cross-origin',
     ];
 
     /**
