diff --git a/ipn/ipnlocal/local.go b/ipn/ipnlocal/local.go
index 2509c489b..909a4ac48 100644
--- a/ipn/ipnlocal/local.go
+++ b/ipn/ipnlocal/local.go
@@ -4833,6 +4833,10 @@ func (dt *driveTransport) RoundTrip(req *http.Request) (resp *http.Response, err
 		req.Body = bw
 	}
 
+	// Strip origin and referer headers
+	req.Header.Del("origin")
+	req.Header.Del("referer")
+
 	defer func() {
 		contentType := "unknown"
 		switch req.Method {