Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Don't be so condescending, you didn't read my entire post. To quote myself:

  > POST (and restricting to same-origin)
I still don't think it's possible to forge the referer header on an uncompromised browser.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: