4 ms·
Yeah, nice target for drive-by malware uploaders. A better approach than blanket allowing of hotlinking is to whitelist certain user agents (curl, wget) and on
by Kudos 12y ago
Yeah, nice target for drive-by malware uploaders.
A better approach than blanket allowing of hotlinking is to whitelist certain user agents (curl, wget) and only allow those to directly download the file, and to present landing pages detailing the file and its contents to everyone else. It's been on my list of things to implement in my own sharing site.