Stripping HTTP referrer for client-side CSRFblog.kotowicz.net1 point·bluesmoon··0 commentsOpen articleSaveView on HN