2 ms·
> Some websites rely (at least in part for verification) on referrer for the authentication process, I can imagine that causing some headaches for people. You
by CodeWriter23 9y ago
> Some websites rely (at least in part for verification) on referrer for the authentication process, I can imagine that causing some headaches for people.
You mean some websites that fail to employ the best practice of “don’t trust external input”. Yes that applies to easily-spoofed headers.
- tzakrajs 9y agoThey don't rely on it for authentication alone, usually it's a secondary or tertiary method that can block a login.