NO_REFERRER_WHEN_DOWNGRADE

This is the default behavior if no policy is specified, or if the provided value is invalid. The origin, path,
and querystring of the URL are sent as a referrer when the protocol security level stays the same (HTTP→HTTP,
HTTPS→HTTPS) or improves (HTTP→HTTPS), but isn't sent to less secure destinations (HTTPS→HTTP).