Type of change

• New feature (non-breaking change which adds functionality)

Description

This PR adds referrer policy support to prevent HTTP Referer headers from being sent when loading images. This enhancement is particularly useful for:

1. Privacy protection: Prevents external image hosts from tracking where images are being displayed
2. Hotlink protection bypass: Enables displaying images from platforms with referrer-based hotlink protection (e.g., WeChat Official Account images)
3. Enhanced security: Reduces information leakage to third-party image servers

Changes Made

1. Meta Tag in Head (head.html)

Added<meta name="referrer" content="never"> to the document head for global referrer policy.

2. Image Tag Attributes (refactor-content.html)

Modified the image processing logic to injectreferrerpolicy="no-referrer" attribute to all dynamically generated<img> tags in post content.

3. Sidebar Avatar (sidebar.html)

Addedreferrerpolicy="no-referrer" attribute to the avatar image in the sidebar.

Additional context

Opened#2586

Testing

Tested with:

• WeChat Official Account images (mmbiz.qpic.cn domain)
• Various image formats (jpg, png, gif)
• Both lazy-loaded and LQIP images
• Avatar images in sidebar
• Images with different Kramdown attributes (.shadow)

Branch Information

• Base branch:master (or latest release branch)
• Feature branch:feat/img-referrerpolicy
• Commits: 2 commits
  • feat(images): add referrerpolicy attribute for privacy protection
  • feat(privacy): add referrer meta tag to prevent information leakage