<iframe src="https://site-b.com" referrerpolicy="unsafe-url">
no-referrer