User agent and Referer

Hi all!
I'm using some PHP-Scripts via HTTPService in my
AIR-Application.
At the moment the AIR-App sends - like a browser -
information about user agent and referer, like:
"app:/MyApp.swf" "Mozilla/5.0 (Windows; U; de-DE)
AppleWebKit/523+ (KHTML, like Gecko) AdobeAIR/1.1"
I'm planning to use these values in my PHP-Script to restrict
the access to some scripts only to calls from AIR.
How reliable are these information? Is it possible to
deactivate or change these values on the client side?
For example, in some browser you can deactivate the option to
send a referer - is this possible in Air too?
Sure, the other way round isn't very safe: a browser can
imitate the referer and user agent and my script then thinks the
client is an Air app. But it's a bit more security.
Thanks a lot.
Regards!

I have a problem in that when I embed a certain swf on an Air
html page, the http-referer that is sent by the Air runtime (or the
underlying WebKit impl?) when requesting that swf is of the form
app://mypage.html. The particular site serving the object/swf does
not seem to like that referer pattern and sends me back an error
swf rather than the object I requested.
I've been able to verify this by:
1) replaying the offending request in Firefox with the
referer header as it would be sent from Air, which results in the
same failed request (i.e. getting error.swf)
2) stripping the referer header altogether and replaying in
Firefox in which case the intended swf is served to me
The site serving the request doesn't seem to be picky about
what sites are linking to it based on referer (else a no referer
header request would be rejected), it just doesn't seem to like the
Air referer header that is being sent.
My question: Can I suppress/modify the referer header in the
Air runtime? Or at least modify it? This is not an API constructed
URL request but a resource request from an HTML object/embed, so I
can't touch the headers explicitly while formulating the request.
I'm assuming it would be a setting somewhere or a static var that
could be set in the AIR API/runtime. If not, could this mod be
requested?

Similar Messages

  • Change iPhone Exchange Sync 'User Agent' and 'Type'

    Hi. Curious to understand how I might go about changing the 'USER AGENT' and 'TYPE' fields that the iPhone uses to identify itself to an exchange server.
    Currently my iPhone identities itself to an Exchange server as 'Apple-iPhone/xxx.xxx' and 'iPhone'.
    Looking to change these two fields to something different. Is this possible? Can anyone point me towards some productive reading? Not afraid to get my hands dirty in API/SDK.
    Message was edited by: desync

    bump. no ideas? any third party apps?

  • My Safari systematically use the wrong User Agent and I cannot fix it

    My Safari systematically use the wrong User Agent and I cannot fix it

    Back up all data before proceeding.
    Please triple-click anywhere in the line below on this page to select it:
    defaults delete -app Safari CustomUserAgent
    Copy the selected text to the Clipboard by pressing the key combination command-C. Quit Safari.
    Launch the built-in Terminal application in any of the following ways:
    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
    ☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
    ☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.
    Paste into the Terminal window by pressing the key combination command-V.
    Wait for a new line ending in a dollar sign ($) to appear below what you entered. You can then quit Terminal. Test.

  • Submit Referrer and User Agent via URL(Connection)?

    Hi,
    I retrieve some data via http using a URL (and a URLConnection) class. When I check the logfiles, the user agent information submitted by this connection is the name of the JRE-version.
    So my question is: how can I submit custom user agent (and referrer) information? Possibly using the output-methods of a URLConnection?
    kind regards
    Oxy

    urlconn.setRequestProperty("referer","www.domain.com");
    urlconn.setRequestProperty("user-agent","Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0");

  • Trying to get Firefox to open in User Agent "Internet Explorer"

    I run an Internet Cafe and have recently installed Ubuntu 10.04 over Micro$oft.
    I HAVE to give customers an alternative to Live Messenger.
    I have TokBox setup .. but gives problems now & then.
    I need to cover all bases or lose customers.
    The only viable alternative I have found is '''EBuddy'''.
    Now the problem is .. when I log in using Internet Explorer and I connect to a contact - I can see the start video call "button".
    Any other browser and the webcam button does not show.
    All of the Firefox & Seamonkey User Agent Switchers I have tried work .. but I cannot expect the customer to know that they need to switch User Agent before they can use the webcam.
    I need to Launch either Firefox or Seamonkey (preferably Seamonkey - if the fix is to be a permanent one) in Internet Explorer mode.
    A permanent "fix" for Firefox was suggested on the Ubuntu Forum ...
    1. Open about:config
    2. Right-click, choose "New" > "String"
    3. Type "general.useragent.override" (no parentheses) into the "New String Value" dialog box that appears and press "Enter." Type or copy and paste the desired new user agent string into the "Enter String Value" box (in this case "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)" )
    When you're done, copy that Firefox profile to all of your computers (the .mozilla folder)
    I tried this on Seamonkey .. but it did not have the desired effect = no start video call button.
    There is a Proxy Tool add on for Seamonkey which can change the user agent and this works. Same thing for Firefox.
    But the user agent is back to default on browser re-start.
    In an ideal world I would like to create a Launcher on Ubuntu desktop which would open either Firefox or Seamonkey on the E Buddy sign in page and the User Agent would automatically be set to IE8 or 9.

    Try to set the user agent via a user.js file.
    *http://kb.mozillazine.org/user.js_file
    user_pref("general.useragent.override", "<IE user agent>");

  • How can we make the selected Debug User Agent Netscape 7.0 stick?

    To get into http://gap.com I have to go to the Debug menu, choose User Agent and choose Netscape 7.0.
    It works Ok.
    Then I quit Safari. Get back into Safari. User Agent is back to Automatically Chosen, and gap.com to not working.
    How can we make the selected User Agent stick?
    Thanks,
    Roberto

    Unfortunately, I don't think there is an automated way of going about this. To begin with, the 'Debug' menu was never meant to be user accessible in the most common context.
    However, that said, you could lessen the pain by assigning a keyboard shortcut to the 'Netscape 7.0' menu-item in the 'Keyboard & Mouse' preference pane (under the 'Keyboard Shortcuts' tab). Hope that helps, somewhat.
    Yang

  • HttpConnection.setRequestProperty DOUBLES User-Agent

    J2ME HttpConnection.setRequestProperty
    The doc states the following:
    public void setRequestProperty(String key,
    String value)
    throws IOException
    Sets the general request property.
    If a property with the key already exists, overwrite
    its value with the new value.
    Actually, (at least on Windows-XP) for User-Agent, it prepends it to always
    there "UNTRUSTED/1.0"
    Microsoft IIS has fits with User Agent with TWO agents, e.g. "KSOAP/2.0, UNTRUSTED/1.0" (it dies with a HTTP 400/Bad Request/Invalid Header Name error)
    With KSOAP, since I have source to it, I can comment out the explicit setting of User-Agent, and use it to consume IIS/dot net web services
    BUT, with JSR-172, I have no such control
    Hence, without some workaround, I'm unable to use JSR-172 with a IIS/dot net web service
    HELP, Please!
    Thanks

    A possible workaround would be to set up a proxy server that forwards the request after fixing the user agent (it's ugly but it'll work).
    But where are you getting this behaviour. I doubt it comes up with any real devices.
    shmoove

  • WebDAV, User-Agent, Mozilla

    Here is a strange behaviour.
    We are writing a WebDAV client to interface with the Oracle CM SDK. But when we write
    User-Agent: Mozilla compatible....
    in the request we get a 403 error from the SDK.
    It is the word 'Mozilla' which does not work. It seems like the SDK parses the User-Agent and raises an Error when it finds this word.
    What's up?
    /Magnus

    You may get this error if cleartext authentication is being prevented, due to the dav server believing your client is netscape navigator!
    PREVENT_NETSCAPE_CLEARTEXT_AUTH = m_davServletParams.isNetscapeCleartextAuthPrevented();
    if (PREVENT_NETSCAPE_CLEARTEXT_AUTH && DavUtils.isClientNetscape(req))
    if (Debug.DEBUG)
    debug("handleException", "Client is Netscape and Netscape cleartext auth is disabled, returning FORBIDDEN.");
    resp.sendError(HttpServletResponse.SC_FORBIDDEN);
    sent = true;
    //returns true if the client making the request is Netscape
    public static boolean isClientNetscape(HttpServletRequest req)
    String client = req.getHeader("User-Agent");
    if (client != null && client.startsWith("Mozilla") && (client.indexOf("MSIE") == -1))
    return true;
    else
    return false;
    //returns true if the client making the request is MS Internet Explorer
    public static boolean isClientIE(HttpServletRequest req)
    String client = req.getHeader("User-Agent");
    if (client != null && client.startsWith("Mozilla") && (client.indexOf("MSIE") != -1))
    return true;
    else
    return false;
    Enable dav debugging:
    2) Enable DAV debugging :-
    Set IFS_DAV_DEBUG=true in the oc4j.properties file found under the
    $ORACLE_HOME/j2ee/OC4J_iFS_files/config directory
    And set the HTTP Node log level to HIGH (through Enterprise Manager Web
    Site)
    Then bounce the instance.

  • User agent configuration

    Now that I have my user agent from my cell phone, how do i configure Firefox Browser on my laptop PC to make my usb tethering work at a normal internet access speed again?
    Can you please provide instructions?

    Are you getting pages for mobile device on the desktop computer?
    You would likely have to reset the user agent and clear cache (or bypass the cache) and cookies after changing user agent.
    Clear the cache and remove cookies only from websites that cause problems.
    "Clear the Cache":
    *Firefox/Tools > Options > Advanced > Network > Cached Web Content: "Clear Now"
    "Remove Cookies" from sites causing problems:
    *Firefox/Tools > Options > Privacy > "Use custom settings for history" > Cookies: "Show Cookies"

  • Configuration issue in IE as Document mode: 10 and User agent String: Internet Explorer 8

    Hi,
    I have a telerik rad popup window performing some input operation. The problem is when I use the configuration in IE as Document mode: 10 and User
    agent String: Internet Explorer 8, scroll bars appear in the window from nowhere. It is working fine with every other configuration of IE. I've also used a separate stylesheet for IE 8 but it won't apply in this case. 
    Here are the screen shots of the window.
    Actual view
    With Scorllbar
    Please if anybody could suggest a solution for this weird problem it would be a great help.
    Thanks in advance.
    Neelesh

    Hi,
    It seems we need to talk with the site developers to determine how the sheet would display with different IE user agent string.
    Regarding the user agent string changes, please take a check with the following article:
    Introducing IE9’s User Agent String
    The Internet Explorer 8 User-Agent String (Updated Edition)
    Hope this may help
    Best regards
    Michael Shao
    TechNet Community Support

  • To solve another problem, I need to reset my user agent. But when I type about:config in the address bar, all I get is a Firefox window that has the text "config" on the page and nothing else. No text or fields or ANYTHING. What can i do short of unins

    Firefox 3.6.3
    Windows XP
    Otherwise browses OK.
    == User Agent ==
    Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)

    Make sure that you type '''about:config''' in one word and without any spaces in the location bar.
    You can also use "Reset all user preferences to Firefox defaults" on the [[Safe mode]] start window - See http://kb.mozillazine.org/Resetting_preferences

  • Web Agent and Clip Board set up for multi user environment

    Hi
    Our environment is
    Database: 0racle8.1.5 on Sun Solaris
    Currently we are not using OAS but a portal server and Apache
    Intermedia Web Agent and Clip Board are working fine.
    The questions are
    1. if there are multiple users (content managers) who would be adding /modifying content in the database, the how can I go about with Clip board.
    2.The requirement is these people should be able to search documents on the basis of keywords. So how do we integrate Intermedia query capabilities on this clip board interface.
    3. For production level how do we go about implementing.
    Should we continue to have the ctxsys user and use that itself.
    Thank you for any solutions

    I have NO idea if these "exact problems" pertain to Macs, since I think most of these discussions are about Windows... but, some reading (not all PPro, but I put all the links I have saved, just for general information)
    -see #3 http://forums.adobe.com/thread/771151
    -you may NOT "map" your My Documents folder to a network drive
    -you MUST give all users administrator accounts to use Premiere
    -and especially Encore dual layer http://forums.adobe.com/thread/969395
    -#5 Server 2008 is UNsupported http://forums.adobe.com/thread/851602
    -a work around, of sorts http://forums.adobe.com/thread/957523
    -and not on a "domain" http://forums.adobe.com/thread/858977
    -also PreEl see #5 http://forums.adobe.com/thread/1017199
    -more PreEl problem http://forums.adobe.com/thread/975117
    The solution... some day... may be at this link
    Adobe Anywhere http://www.adobe.com/products/adobeanywhere.html

  • User Agent Strings for Office 365 Install and Updates

    In my organization, we restrict internet access to a specific list of approved applications by user agent string; however, it seems the user agent string for Office 365 (2013) applications has changed over time causing installs and updates of Office 365
    on client PCs to fail.
    Is there a repository of user agent strings used by Office 365 applications?
    Thanks in advance.

    Hi,
    Please refer to this link:
    http://technet.microsoft.com/en-us/library/jj219420.aspx
    As mentioned under Ports, protocols and URLs used by Click-to-Run, 
    Download, installation from the portal
    Automatic updates
    TCP
    80
    http://officecdn.microsoft.com
    I hope this helps.
    Regards,
    Melon Chen
    TechNet Community Support

  • Internet Explorer 11 - Emulation Document Mode and User Agent String Drop Down Menu Blank

    Hey
    I have a user who has a problem with Internet Explorer 11 where when you go to emulation mode using F12, the Document Mode and User Agent String Drop Down Menu are both blank. On our internal website its works correctly but on all other external websites
    they are both blank.
    I have had a look at the link below but this did not help as it would not recreate some of the registry keys.
    http://answers.microsoft.com/en-us/ie/forum/ie11-iewindows8_1/document-mode-and-user-agent-string-dropdowns/cd34d5f8-7839-4083-af55-05d49ba85190?rtAction=1387560713451
    Charlie

    Hi,
    Please include links to any websites that you are having issues with your questions.
    There are some known reasons why the documentMode dropdown appears blank...
    not all websites though should have the conditions for this.
    f12>Console tab, refresh the page to show suppressed error messages and warnings... (documentMode x-ua toggling is listed)...
    IE11 includes improvements for XSS... to link to internet sites from your intranets you need to add those sites (If you really, really trust them) to the Trusted Sites list.
    the developer console will list blocked xss requests.
    by default IE11 runs in EPM.... in the Internet Zone, while it is not switched on for the intranet zone....
    EPM only allows 64 bit Addons and ActiveX controls to run in the context of an IE tab...
    so its highly likely that one of your Addons is causing the issue.
    the first step in troubleshooting IE issues is to test in noAddons mode.
    Regards.
    Rob^_^

  • IE11 browser difference between "Default" and "Internet Explorer 11" user agent string

    I installed IE11 in my machine .And also we migrating all our developed application (ASP .Net/ VS 2010) to work in IE11 .
    But when i open (Developer tool (F12) -> Emulation) In that ,
    While selecting "User agent string" i two different option
    Default
    Internet Explorer 11
    Actually what difference between this two user agent string and too i am working in .Net
    And i select "IE11" as a user agent option , most of my application working flawless (design) but if i select "Default" throwing lot of design oriented bugs.
    Is there setting to be made in .Net framework or anything else
    Because it should work in both "Default" and "IE11" user agent string

    Hello kumaran_Arun,
    Please try to reset Internet Explorer and check if the issue still exists.
    http://windows.microsoft.com/en-hk/internet-explorer/reset-ie-settings#ie=ie-11
    If this issue is related to Internet Explorer web development, to receive better support, it is recommended to post in the MSDN forum.
    The professionals there will be glad to help you.
    https://social.msdn.microsoft.com/Forums/ie/en-US/home?category=iedevelopment
    Thanks for your understanding.
    Best regards,
    Fangzhou CHEN
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Maybe you are looking for

  • Error message after Recovery with discs

    I have a Pavilion dv6911om. I had to replace the hard drive and then did a system recovery with the discs sent by HP but it failed to recover the computer. It gives me a CTOERROR.flg notepad with a bunch of information on it and from what I can tell

  • SOAP reciever channel Query

    Hi All, I have proxy>>BPM>>Reciever Web service scenario. It is working fine in DEV and QA and now we are moving it to the PRD system. My concern is that do I need to check for any port opening or firewall policy to enble to receiver URL in PRD syste

  • To make PR header text as Mandatory

    hi Gurus           In ME52N (ie.Purchase requestition) I want to make the Header text as mandotary field.Any User exit or BADI available?

  • "Feed already submitted"

    Yesterday, I contacted ITunes to delete my current feed since I no longer own the domain it is hosted on. Today, I got the email letting me know the feed was terminated so I went ahead and tried to submit my new feed adress only to get the message fr

  • ABOUT NAST RSNAST00

    Hi,   How ABOUT NAST RSNAST00 this are linked with ABAP Code? Example if any? Thanks Avi