undefined | Better HN

0 pointsHughParry1y ago0 comments

Good shout. Can always block based on origin header though (when under the assumption that it's a legit browser) since it's a forbidden header name.

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Or...

0 comments

kbolino1y ago

Neither the Origin nor the Referer headers have anything to do with a 301 redirect.

gruez1y ago

I just tested on firefox and it doesn't send the "Origin" header when using referrerpolicy="no-referrer". It's also not present when navigating using the url bar directly.

j / k navigate · click thread line to collapse

0 comments

kbolino1y ago

Neither the Origin nor the Referer headers have anything to do with a 301 redirect.

gruez1y ago

I just tested on firefox and it doesn't send the "Origin" header when using referrerpolicy="no-referrer". It's also not present when navigating using the url bar directly.

j / k navigate · click thread line to collapse