check-referer
v0.0.3
Published
Middleware that rejects requests whose referer or origin header does not identify them as having come from a specified domain
Downloads
8
Maintainers
downloadReadme
check-referer
Connect middleware for validating the refering domain of incoming requests. Checks the referer and origin headers to ensure browser requests are initiated from approved domains.
Example
var checkReferer = require('check-referer');
var checkRefererMw = ;
app.post('/api/endpoint', checkReferer('mydomain.com'), function(req, res) {
// Requests from other platforms will return 403
res.send('Hi!');
});
// You can also pass an array to allow multiple domains
checkReferer(['mydomain.com', 'anotherdomain.net']);