Forum Discussion
insomniak_11745
Nimbostratus
NimbostratusRestrict Access via HTTP referer
I'm attempting to restrict access to an application via HTTP REFERER. Using the example given by the dev team, I'm using something that looks like this:
when HTTP_REQUEST {
switch -glob [HTTP::...
Kevin_Stewart
Employee
EmployeeI would just add to Aaron's addition that, generally speaking, blocking access based on a Referer header is trivially surmountable. Aside from browsers not passing the Referer header going from HTTPS to HTTP, it's VERY easy to spoof the header.
