# Release: datasette-referrer-policy 0.1
Source: [https://simonwillison.net/2026/May/5/datasette-referrer-policy/](https://simonwillison.net/2026/May/5/datasette-referrer-policy/)
The OpenStreetMap tiles on the Datasette[global\-power\-plants demo](https://datasette.io/global-power-plants/global-power-plants)weren't displaying correctly\. This turned out to be caused by two bugs\.
The first is that the CAPTCHA[I added](https://github.com/simonw/datasette-turnstile)to that site a few weeks ago was triggering for the`\.json`fetch requests used by the map plugin, and since those weren't HTML the user was not being asked to solve them\. Here's[the fix](https://github.com/simonw/datasette.io/commit/23a1c8596b75b2094db46035a3b4280109fb3df3)\.
The second was that OpenStreetMap quite reasonably[block tile requests](https://wiki.openstreetmap.org/wiki/Referer)from sites that use a`Referrer\-Policy: no\-referrer`header\.
Datasette does this by default, and I didn't want to change that default on people without warning \- so I had Codex \+ GPT\-5\.5[build me](https://gisthost.github.io/?402f2f23ee3dbfa251bf0d216e0224f7)a new plugin to help set that header to another value\.
Datasette 1.0a27 released with major security improvements (modern CSRF headers), new RenameTableEvent for plugin compatibility, and various API enhancements including improved upsert handling and database locking fixes.
Datasette-Agent 0.1a3 is released with UI improvements including 'View SQL query' buttons, better handling of empty reasoning chunks, and improved truncated response display.