2 ms·

Any service running on local should reject HTTP requests with Origin header as those are generated from browser JS API. In addition requests with UserAgent shou

Any service running on local should reject HTTP requests with Origin header as those are generated from browser JS API. In addition requests with UserAgent should also be typically be rejected.

rafram 1y ago
> In addition requests with UserAgent should also be typically be rejected. No, all HTTP clients set User-Agent.