Indeed we have relaxed this restriction so that you can call services which require specific referers. The appid is now contained within the User Agent string.
http://code.google.com/p/googleappengine/issues/detail?id=445 (which I see you've commented on--the documentation has recently been updated too.) --Matthew On Sep 2, 7:11 pm, Matt Farnell <mfarn...@gmail.com> wrote: > I noticed today that you can now set the Referer HTTP header for a UrlFetch, > this is both a good (some services require setting it) and bad move (you can > pretend you are someone else). Is this a permanent change or a mistake? > thanks, > Matt --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Google App Engine for Java" group. To post to this group, send email to google-appengine-java@googlegroups.com To unsubscribe from this group, send email to google-appengine-java+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/google-appengine-java?hl=en -~----------~----~----~----~------~----~------~--~---