Home page logo

bugtraq logo Bugtraq mailing list archives

Re: "Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein
From: anonymous () anonymous com
Date: 27 Sep 2005 03:19:23 -0000

Another way to spoof a Referer header using XMLHTTP is to do something like this:
xmlhttp.SetRequestHeader("Referer:", "http://some.referer.com";);

Note that the ':' after the Referer does the trick here.  If this is not present IE ignores this header.

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]