Often is the case but I would still suggest setting the referrer policy should the file be enticing enough for people to register an account assuming forum ranks and further actions are not part of the picture.