3 ms·
You're absolutely correct. Origin or X-Requested-With (or any other custom header) are a good source of protection for cases like this.
by nbpoole 16y ago
You're absolutely correct. Origin or X-Requested-With (or any other custom header) are a good source of protection for cases like this.