canmove, Confirmed users
1,537
edits
Security/Origin: Difference between revisions
Jump to navigation
Jump to search
m
→Selection of "null" token
| Line 21: | Line 21: | ||
=== Selection of "null" token === | === Selection of "null" token === | ||
In some scenarios, the string "null" is sent in lieu of origin information. This is done to indicate that the cause of the request is not trustworthy, even though it may come from the same origin. Certain requests are not generally useful as state-changing triggers (like requests for stylesheets, images or window navigation) and probably should not be trusted even if sent same-origin. | In some scenarios, the string "null" is sent in lieu of origin information. This is done to indicate that the cause of the request is not trustworthy, even though it may come from the same origin. Certain requests are not generally useful as state-changing triggers (like requests for stylesheets, images or window navigation) and probably should not be trusted even if sent same-origin. | ||