subject:"HttpResponseRedirect\(request.META\[\"HTTP_REFERER\"\]\)"

Re: HttpResponseRedirect(request.META["HTTP_REFERER"])

2009-09-24 Thread Tim Chase

dijxtra wrote: > Is it safe to use HttpResponseRedirect(request.META["HTTP_REFERER"])? > Can a session be stolen using this coed by spoofing HTTP_REFERER? Two things stand out to me: 1) HTTP_REFERER is not a required header, so if the browser doesn't send it, your code won

HttpResponseRedirect(request.META["HTTP_REFERER"])

2009-09-24 Thread dijxtra

Is it safe to use HttpResponseRedirect(request.META["HTTP_REFERER"])? Can a session be stolen using this coed by spoofing HTTP_REFERER? Thanks in advance, nick --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Group