News for hackers. Stuff that matters.

A comment on Certificates for localhost. Parent comment

Re:Certificates for localhost by mholt on Wednesday June 20, 2018 @05:36PM (#17360011)
> Can you be sure Origin/Referer isn’t spoofed?

As far as I know, browsers forbid modifying these headers, (especially?) when making cross-origin requests.

[ Parent | on HN ]

There are no comments on this comment yet.