strict-origin-when-cross-origin

Actual document.referrer:

This browser value is not authenticated client identity. An empty value can also result from browser privacy settings.