| setappfwprofile_refererheadercheck |
Use this method to set enable validation of Referer headers. Referer validation ensures that a web form that a user sends to your web site originally came from your web site, not an outside attacker. Although this parameter is part of the Start URL check, referer validation protects against cross-site request forgery (CSRF) attacks, not Start URL attacks. |
Syntax |
Parameters |
name |
Name of the profile that you want to modify. This is mandatory parameter. |
refererheadercheck |
Enable validation of Referer headers.
Referer validation ensures that a web form that a user sends to your web site originally came from your web site, not an outside attacker.
Although this parameter is part of the Start URL check, referer validation protects against cross-site request forgery (CSRF) attacks, not Start URL attacks. Default value = AS_HEADER_CHECK_OFF. Possible Values : OFF, if_present, AlwaysExceptStartURLs, AlwaysExceptFirstRequest. |
Return Value |
Returns simpleResult |
See Also |