Ask HN: How to validate requests with no back end?

2 pointsby doomsdaychickenvor 9 Jahren1 comments

I'm a newer programmer who is trying to understand web security.

Say I were to build an IP address lookup API service. I want to make sure that requests come from where they say they do. So I don't want someone to spoof example.com and make a request to my service. Is there a way to do this, without making the real example.com use server side code?

1 comments

itamarstvor 9 Jahren

There's tools like https://github.com/jakerella/jquery-mockjax - depending on libraries you're using you'll want to use a different one. Basic term is "mock" or "fake". Just be careful to make sure your fake actually matches the real thing.