Set referer for xml.HTTP.Request?

Question

I am successfully sending xml.http.request by using

var createCORSRequest = function(method, url) {
  var xhr = new XMLHttpRequest();
  if (\"withCredentials         


        

Answer 1

You cannot. The XMLHttpRequest specification forbids the altering of the referer header (this stops sites lying in it to bypass security checks which some sites use the referer for).

Terminate these steps if header is a case-insensitive match for one of the following headers:

• …
• Referer
• …

Answer 2

You can try something like this:

xhr.setRequestHeader('X-Referer', window.location.href);

And then read this custom X-Referer header.