Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Is checking the “HTTP Referer” a valid method of stopping cross-site request forgeries?

April 26, 2017checking cross-site forgeries method request stopping valid

0

Posted

Is checking the “HTTP Referer” a valid method of stopping cross-site request forgeries?

1 Answer

0

Posted

No. As discussed in lectures, users may have browsers configured not to send “Referer” information (in fact, “Referer” is never sent for links on HTTPS pages). Also many anonymizing proxies strip “Referer” information.