manilaSuite.referer.Check

The referer check for "trojan horse" does not cater to browsers that leave the username and password (iCab 1.3 was one, and Palm WAP browsers are reputedly the same). Watch for that case and strip them out before checking.

on check (urlName)

«Make sure the referer is the page it's supposed to be.

unaltered lines omitted

manilaSuite.referer.mustNotBeEmpty ()

local (pta = html.getPageTableAddress ())

local (referer = pta^.requestHeaders.referer)

local (expectedReferer = pta^.urls^.[urlName])

referer = string.popSuffix (referer, '$')

referer = string.popTrailing (referer, '/') //PBS 07/16/01

expectedReferer = string.popSuffix (expectedReferer, '$')

expectedReferer = string.popTrailing (expectedReferer, '/') //PBS 07/16/01

if not (string.lower (expectedReferer) == string.lower (referer))

unaltered lines omitted

return (true)

Relative to Frontier version 9.7b10