Comment 2 for bug 548906

Revision history for this message
Gary Poster (gary) wrote :

We have consciously decided to require REFERER headers to combat CRSF attacks, despite the known annoyances. Agreed on suggestion 1.