4 ms·

Can someone fake the origin?

• fimdomeio 9y ago
  This is controlled on browser level and most (all?) browsers implement this. Origin can be faked by just using anything that can make a http request, like curl. It exists to protect users not the server.
• askthrowaway 9y ago
  from browser ? No. from non-browser clients like curl ? Yes. And your server will never be able to tell if it is fake or not