46 ms·
> Can you be sure Origin/Referer isn’t spoofed? As far as I know, browsers forbid modifying these headers, (especially?) when making cross-origin requests.
by mholt 8y ago
> Can you be sure Origin/Referer isn’t spoofed?
As far as I know, browsers forbid modifying these headers, (especially?) when making cross-origin requests.