Vulnerability Development mailing list archives

Re: Re: Digg Security.


From: steve () quicksilverscreen com
Date: 12 May 2006 11:54:48 -0000

You must run the html on an SSL enabled server, when traveling from an 'https' to an 'http' address web browsers do not 
send an http referer. This is how my example works.

Some version of flash, and java can also be used to stop the referer being sent if you do not have access to an ssl 
server.


Current thread: