[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: "Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Re: "Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein
- From: anonymous@xxxxxxxxxxxxx
- Date: 27 Sep 2005 03:19:23 -0000
Another way to spoof a Referer header using XMLHTTP is to do something like
this:
xmlhttp.SetRequestHeader("Referer:", "http://some.referer.com";);
Note that the ':' after the Referer does the trick here. If this is not
present IE ignores this header.
Thanks!