Closed TechnikEmpire closed 7 years ago
We're gonna opt for option A here. So, referer arg, if supplied, should only ever be an exact domain.
Changed this to a bug because it was a failure in implementing correctly in the first place due to a lack of understanding.
Because the
referer
field isn't always just the domain name, and may be a full URL, we need to either:a) Parse the referer as a
Uri
object and compare against thehost
property afterward. b) Make thereferer
arguments get parsed and processed as rules themselves. So basically the operator here would become a sort of recursive url filter itself. This would definitely be cooler and more powerful, but not necessarily good for performance.