4 ms·
my solution is request.xhr? check. the link above is only to explain what rails-bug was. I don't think checking referrer is a good idea there.
by homakov 13y ago
my solution is request.xhr? check. the link above is only to explain what rails-bug was. I don't think checking referrer is a good idea there.
- tzury 13y agoSorry Egor, I thought you are pointing out an article you have published.
- homakov 13y agoThis is joev's article. His explanations of the issue are better than mine ;)
- joev_ 13y agoHey Egor, article author here. How come you are not such a fan of checking referer? It cannot be a global fix (some sites depend on serving xdomain scripts, have lots of users with proxies that alter headers etc), but it should work well for many cases no?
- homakov 13y agoit works of course, but to be compatible with many environments we need something more reliable than Referrer.