Assertion: request | /r/CapableOf | omit the referer header
Facets:
Source sentences:
text: However, a request that omits the Referer header must be treated as unauthorized because an attacker can suppress the Referer header by issuing requests from FTP or HTTPS URLs.