manilaSuite.referer.checkSelf

The referer check for "trojan horse" does not cater to browsers that leave the username and password (iCab 1.3 was one, and Palm WAP browsers are reputedly the same). Watch for that case and strip them out before checking.

on checkSelf ()

«Changes

unaltered lines omitted

manilaSuite.referer.mustNotBeEmpty ()

local (pta = html.getPageTableAddress ())

local (lowerReferer = string.lower (pta^.requestHeaders.referer))

local (lowerExpectedReferer = string.lower (pta^.url))

if lowerExpectedReferer endsWith "/#objectnotfoundhandler"

unaltered lines omitted

if lowerExpectedReferer endsWith "/default"

unaltered lines omitted

if not (lowerReferer beginsWith lowerExpectedReferer)

unaltered lines omitted

return (true)

Relative to Frontier version 9.7b10