https://blog.mingon.dev/tags/referrer-policy/Recent content in Referrer-Policy on 보안 연구 노트Hugo -- gohugo.ioko-KRThu, 25 Jun 2026 18:00:00 +0900https://blog.mingon.dev/write-up/portswigger/csrf/write-up-portswigger---csrf-with-broken-referer-validation/Thu, 25 Jun 2026 18:00:00 +0900https://blog.mingon.dev/write-up/portswigger/csrf/write-up-portswigger---csrf-with-broken-referer-validation/대상 도메인이 포함되기만 하면 통과하는 느슨한 Referer 검증을 exploit server 경로에 도메인을 넣고 unsafe-url 정책으로 전체 URL을 노출시켜 우회하는 풀이https://blog.mingon.dev/write-up/portswigger/csrf/write-up-portswigger---csrf-where-referer-validation-depends-on-header-being-present/Thu, 25 Jun 2026 15:00:00 +0900https://blog.mingon.dev/write-up/portswigger/csrf/write-up-portswigger---csrf-where-referer-validation-depends-on-header-being-present/Referer가 있을 때만 검증하는 안전하지 않은 폴백을 referrer policy로 헤더 자체를 제거해 우회하는 풀이