如何欺骗http引用 [英] How to spoof http referer

问题描述

截至目前，还有什么方法可以欺骗HTTP Referer?

As of current, are there still any methods to spoof HTTP referer?

推荐答案

是.

HTTP_REFERER 是客户端传递的数据.客户端传递的任何数据都可以被欺骗/伪造.这包括 HTTP_USER_AGENT.

The HTTP_REFERER is data passed by the client. Any data passed by the client can be spoofed/forged. This includes HTTP_USER_AGENT.

如果您编写了 Web 浏览器，那么您将在 GET、POST 等上设置和发送 HTTP 引用和用户代理标头.

If you wrote the web browser, you're setting and sending the HTTP Referrer and User-Agent headers on the GET, POST, etc.

您还可以使用中间件(例如 Web 代理)来更改这些.Fiddler 可让您控制这些值.

You can also use middleware such as a web proxy to alter these. Fiddler lets you control these values.

如果您想将访问者重定向到另一个网站并将其浏览器的引用设置为您想要的任何值，您需要开发一个网络浏览器插件或在他们的计算机上运行的某些其他类型的应用程序.否则，您无法在访问者的浏览器上设置引荐来源网址.它将显示您网站上链接到它的页面.

If you want to redirect a visitor to another website and set their browser's referrer to any value you desire, you'll need to develop a web browser-plugin or some other type of application that runs on their computer. Otherwise, you cannot set the referrer on the visitor's browser. It will show the page from your site that linked to it.

在您的情况下，可能是有效的解决方案是让您代表访问者加载第三方页面，使用任何必要的引用，然后从您的服务器向用户显示该页面.

What might be a valid solution in your case would be for you to load the third party page on the visitor's behalf, using whatever referrer is necessary, then display the page to the user from your server.

这篇关于如何欺骗http引用的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！