How do you forge the referer header as a third-party site? | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

eurleif on March 31, 2012 | parent | context | favorite | on: #1 CSRF Is A Vulnerability In All Browsers

How do you forge the referer header as a third-party site?

sdevlin on March 31, 2012 [–]

Ha, I'm wrong. I thought you could set the referer with setRequestHeader on an XHR. Mea maxima culpa.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact