tag:blogger.com,1999:blog-8503755746105415394.post-29701611934831968092008-04-24T13:08:00.000Z2008-04-24T13:08:00.000Z@pazi - Historically, ways have existed of spoofin...@pazi - Historically, ways have existed of spoofing or masking the Referer header, and it is likely that further ways will be discovered in future. In general, the Referer header is not a reliable foundation on which to build any security defences within web applications.PortSwiggerhttp://www.blogger.com/profile/04744809054520271899noreply@blogger.com