4 ms·
Your enemy is 3rd-party cookies, not referer headers. This just makes it harder for sites to do mostly harmless analytics and in some cases it actually prevents
by Udo 13y ago
Your enemy is 3rd-party cookies, not referer headers. This just makes it harder for sites to do mostly harmless analytics and in some cases it actually prevents security features from working correctly.
- ciupicri 13y agoIndeed, there are a couple of site that don't work at all or require an extra step; if I remember correctly, most of them mumble something about CSFR and are based on Django. For example I can't log in to Launchpad [1] or Coursera or I'm required to push "I'm a human" button on the Fedora Accounts System website. [1]: https://bugs.launchpad.net/canonical-identity-provider/+bug/1198101 https://bugs.launchpad.net/canonical-identity-provider/+bug/...