No referrer header on leacher's site !!

nanaya me at myconan.net
Tue Apr 4 11:32:06 UTC 2017


Hi,

On Tue, Apr 4, 2017, at 20:24, shahzaib mushtaq wrote:
> Hi,
> 
> We came across a website who is playing our video links remotely. Since
> we've hotlinking protection enabled based on referrer headers so i
> checked
> the request header by playing that video & found out that *referrer
> header
> was missing* in the browser's requests header tab.
> 

If your site isn't https but his site is, some browsers by default don't
send referrer header. There are also various other referrer policies
with varying level of support:

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy

http://caniuse.com/#search=referrer%20policy


More information about the nginx mailing list