Home page logo

bugtraq logo Bugtraq mailing list archives

Re: The Dangers of Allowing Users to Post Images
From: "Jason Brooke" <jb () qgl org>
Date: Sun, 17 Jun 2001 12:01:26 +1000

The discussion is about preventing the users machine being "attacked"
unknowingly. A user faking a referer themselves isn't going to be a problem,
as not only would they be authorizing the action, but they'd be going out of
their way to make sure it got through. Read up on the first post to see what
this discussion is actually about.

Popular software that strips out Referer headers is utilised by many users.
They're not faking the Referer, but they're certainly not sending it. So, again,
relying on that header for pretty much anything is not much of an idea.


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]