diff --git a/src/view/page/PhabricatorBarePageView.php b/src/view/page/PhabricatorBarePageView.php
index 2f0e23eb7c..2519226509 100644
--- a/src/view/page/PhabricatorBarePageView.php
+++ b/src/view/page/PhabricatorBarePageView.php
@@ -1,114 +1,122 @@
 <?php
 
 /**
  * This is a bare HTML page view which has access to Phabricator page
  * infrastructure like Celerity, but no content or builtin static resources.
  * You basically get a valid HMTL5 document and an empty body tag.
  *
  * @concrete-extensible
  */
 class PhabricatorBarePageView extends AphrontPageView {
 
   private $request;
   private $controller;
   private $frameable;
   private $deviceReady;
 
   private $bodyContent;
 
   public function setController(AphrontController $controller) {
     $this->controller = $controller;
     return $this;
   }
 
   public function getController() {
     return $this->controller;
   }
 
   public function setRequest(AphrontRequest $request) {
     $this->request = $request;
     return $this;
   }
 
   public function getRequest() {
     return $this->request;
   }
 
   public function setFrameable($frameable) {
     $this->frameable = $frameable;
     return $this;
   }
 
   public function getFrameable() {
     return $this->frameable;
   }
 
   public function setDeviceReady($device_ready) {
     $this->deviceReady = $device_ready;
     return $this;
   }
 
   public function getDeviceReady() {
     return $this->deviceReady;
   }
 
   protected function willRenderPage() {
     // We render this now to resolve static resources so they can appear in the
     // document head.
     $this->bodyContent = phutil_implode_html('', $this->renderChildren());
   }
 
   protected function getHead() {
     $framebust = null;
     if (!$this->getFrameable()) {
       $framebust = '(top == self) || top.location.replace(self.location.href);';
     }
 
     $viewport_tag = null;
     if ($this->getDeviceReady()) {
       $viewport_tag = phutil_tag(
         'meta',
         array(
           'name' => 'viewport',
           'content' => 'width=device-width, '.
                        'initial-scale=1, '.
                        'maximum-scale=1',
         ));
     }
     $icon_tag = phutil_tag(
       'link',
       array(
         'rel' => 'apple-touch-icon',
         'href' => celerity_get_resource_uri('/rsrc/image/apple-touch-icon.png')
       ));
 
     $apple_tag = phutil_tag(
       'meta',
       array(
         'name' => 'apple-mobile-web-app-status-bar-style',
         'content' => 'black-translucent'
       ));
 
+    $referrer_tag = phutil_tag(
+      'meta',
+      array(
+        'name' => 'referrer',
+        'content' => 'never',
+      ));
+
     $response = CelerityAPI::getStaticResourceResponse();
 
     $developer = PhabricatorEnv::getEnvConfig('phabricator.developer-mode');
     return hsprintf(
-      '%s%s%s%s%s',
+      '%s%s%s%s%s%s',
       $viewport_tag,
       $icon_tag,
       $apple_tag,
+      $referrer_tag,
       CelerityStaticResourceResponse::renderInlineScript(
         $framebust.jsprintf('window.__DEV__=%d;', ($developer ? 1 : 0))),
       $response->renderResourcesOfType('css'));
   }
 
   protected function getBody() {
     return $this->bodyContent;
   }
 
   protected function getTail() {
     $response = CelerityAPI::getStaticResourceResponse();
     return $response->renderResourcesOfType('js');
   }
 
 }