Skip to main content
Information Security

Return to Question

corrected spelling of referer
Source Link
edit approved Mar 9, 2020 at 20:00
GarethAS
edit approved Mar 9, 2020 at 20:00
GarethAS
  • 103
  • 2

Playing with ReferrerReferer Header

There are 2 sites:

http://www.site1.com http://www.site2.com

http://www.site1.com contains link to http://www.site2.com as

<a href="http://www.site2.com/">link<a/>

When user clicks on link from http://www.site1.com browser sends ReferrerReferer header to http://www.site2.com. Based on Referrer header http://www.site2.com makes some processes.

I wonder if I can fake/change (maybe with javascript, PHP, ...) ReferrerReferer header or not send it at all?

Playing with Referrer Header

There are 2 sites:

http://www.site1.com http://www.site2.com

http://www.site1.com contains link to http://www.site2.com as

<a href="http://www.site2.com/">link<a/>

When user clicks on link from http://www.site1.com browser sends Referrer header to http://www.site2.com. Based on Referrer header http://www.site2.com makes some processes.

I wonder if I can fake/change (maybe with javascript, PHP, ...) Referrer header or not send it at all?

Playing with Referer Header

There are 2 sites:

http://www.site1.com http://www.site2.com

http://www.site1.com contains link to http://www.site2.com as

<a href="http://www.site2.com/">link<a/>

When user clicks on link from http://www.site1.com browser sends Referer header to http://www.site2.com. Based on Referrer header http://www.site2.com makes some processes.

I wonder if I can fake/change (maybe with javascript, PHP, ...) Referer header or not send it at all?

Tweeted twitter.com/#!/StackSecurity/status/290081524928372737
Source Link
torayeff
torayeff
  • 4.6k
  • 4
  • 19
  • 15

Playing with Referrer Header

There are 2 sites:

http://www.site1.com http://www.site2.com

http://www.site1.com contains link to http://www.site2.com as

<a href="http://www.site2.com/">link<a/>

When user clicks on link from http://www.site1.com browser sends Referrer header to http://www.site2.com. Based on Referrer header http://www.site2.com makes some processes.

I wonder if I can fake/change (maybe with javascript, PHP, ...) Referrer header or not send it at all?