The unsafe-url value for SVG specifies a request’s full referrerURL is sent along for both same-origin-referrer requests and cross-origin-referrer requests.

unsafe-url

• empty-string
• no-referrer
• no-referrer-when-downgrade
• origin
• origin-when-cross-origin
• same-origin
• strict-origin
• strict-origin-when-cross-origin

• World Wide Web Consortium (W3C)