XMLHttpRequest referrer and iframe

javascript xmlhttprequest referer
Gajus picture Gajus · May 6, 2011 · Viewed 8.5k times · Source

Page A contains javascripts function executing XMLHttpRequest. Page A loads page B in iframe. Page B executes parent.makeRequest() function which in turn executes the XHR request. I expect the referrer/origin of the XHR request to be page B, however it is page A. Is there any way to fix this?

Answer

lonesomeday picture lonesomeday · May 6, 2011

You cannot control the value of the Referer header.

Some HTTP headers can be adjusted when making XHR requests using the setRequestHeader method. However, the Referer header is specifically excepted. From the specifications:

The above headers [including Referer] are controlled by the user agent to let it control those aspects of transport. This guarantees data integrity to some extent.

You could, however, set a custom header. For instance, you could use X-Referer, if this suits your application:

xhr.setRequestHeader('X-Referer', location.href);

Related questions

How can I upload files asynchronously?

I would like to upload a file asynchronously with jQuery. Instead of the file being uploaded, I am only getting the filename. What can I do to fix this problem?

Read More
How to read a local text file?

I’m trying to write a simple text file reader by creating a function that takes in the file’s path and converts each line of text into a char array, but it’s not working. function readTextFile() { var rawFile = …

Read More
Send POST data using XMLHttpRequest

I'd like to send some data using an XMLHttpRequest in JavaScript. Say I have the following form in HTML: <form name="inputform" action="somewhere" method="post"> <input type="hidden" value="person" name="user"> <input type="…

Read More