You need to create a global middleware 'global::header' (where header is middleware name) and add it in config/middlewares.js
Middleware content ./src/middlewares/header.js
module.exports = (config, { strapi }) => {
return (context, next) => {
context.set('referrer-policy', 'origin');
return next();
}
}