Ggtcf

Did Shadowfax go to Valinor?

How is it possible to have an ability score that is less than 3?

How much of data wrangling is a data scientist's job?

How to take photos in burst mode, without vibration?

In Romance of the Three Kingdoms why do people still use bamboo sticks when papers are already invented?

Why doesn't H₄O²⁺ exist?

What to put in ESTA if staying in US for a few days before going on to Canada

What is going on with Captain Marvel's blood colour?

How can I make my BBEG immortal short of making them a Lich or Vampire?

Do I have a twin with permutated remainders?

Does a druid starting with a bow start with no arrows?

What do you call someone who asks many questions?

I'm flying to France today and my passport expires in less than 2 months

Emailing HOD to enhance faculty application

Why does Arabsat 6A need a Falcon Heavy to launch

Stopping power of mountain vs road bike

I would say: "You are another teacher", but she is a woman and I am a man

Alternative to sending password over mail?

Why does Kotter return in Welcome Back Kotter

Would Slavery Reparations be considered Bills of Attainder and hence Illegal?

Is it possible to run Internet Explorer on OS X El Capitan?

Facing a paradox: Earnshaw's theorem in one dimension

What reasons are there for a Capitalist to oppose a 100% inheritance tax?

Were any external disk drives stacked vertically?

HTTP Direct GET request to file vs GET from html tag

What's the difference between a POST and a PUT HTTP REQUEST?HTTP GET request in JavaScript?Is an entity body allowed for an HTTP DELETE request?Where should I put <script> tags in HTML markup?HTTP GET with request bodymaximum length of HTTP GET request?How to use java.net.URLConnection to fire and handle HTTP requestsRedirect from an HTML pageHow is an HTTP POST request made in node.js?How are parameters sent in an HTTP POST request?

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;

0

Is there an accurate way to distinguish between a GET request directly to a file :

website.com/file.css

and a GET request to the same file but when loading a page that includes:

<style rel = "file.css">

As far as I can tell, the HTTP requests are pretty much identical.

Are there any solutions which don't involve:

Monitoring the server request logs (timing / sequence based).

Adding in GET parameters, e.g. file.css?r=dgsfgfgd

Using CSP reporting.

html apache http server

share|improve this question

asked Mar 8 at 23:40

DanbardoDanbardo

267

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  You can check the "Origin" or "Referrer" header from the HTTP request, if either of the header is empty it's manually requested via the browser. However, one can manually craft a request to get around this.
  
  – Dominick Navarro
  Mar 9 at 1:23
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Thanks for your response, I'm not too worried about people creating their own requests, more so about people opening source files directly. In regards to origin / referrer: Using Google Chrome, neither are set when I view the file in the above situations. The Referrer Policy is set, and is slightly different, one no-referrer and the other no-referrer-when-downgrade, but I'm not sure if that's a reliable way to distinguish the two. Everything else in the request is pretty much identical.
  
  – Danbardo
  Mar 9 at 1:57
  
  

  
  
  
  

add a comment | 

0

Is there an accurate way to distinguish between a GET request directly to a file :

website.com/file.css

and a GET request to the same file but when loading a page that includes:

<style rel = "file.css">

As far as I can tell, the HTTP requests are pretty much identical.

Are there any solutions which don't involve:

Monitoring the server request logs (timing / sequence based).

Adding in GET parameters, e.g. file.css?r=dgsfgfgd

Using CSP reporting.

html apache http server

share|improve this question

asked Mar 8 at 23:40

DanbardoDanbardo

267

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  You can check the "Origin" or "Referrer" header from the HTTP request, if either of the header is empty it's manually requested via the browser. However, one can manually craft a request to get around this.
  
  – Dominick Navarro
  Mar 9 at 1:23
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Thanks for your response, I'm not too worried about people creating their own requests, more so about people opening source files directly. In regards to origin / referrer: Using Google Chrome, neither are set when I view the file in the above situations. The Referrer Policy is set, and is slightly different, one no-referrer and the other no-referrer-when-downgrade, but I'm not sure if that's a reliable way to distinguish the two. Everything else in the request is pretty much identical.
  
  – Danbardo
  Mar 9 at 1:57
  
  

  
  
  
  

add a comment | 

Is there an accurate way to distinguish between a GET request directly to a file :

website.com/file.css

and a GET request to the same file but when loading a page that includes:

<style rel = "file.css">

As far as I can tell, the HTTP requests are pretty much identical.

Are there any solutions which don't involve:

Monitoring the server request logs (timing / sequence based).

Adding in GET parameters, e.g. file.css?r=dgsfgfgd

Using CSP reporting.

html apache http server

share|improve this question

asked Mar 8 at 23:40

DanbardoDanbardo

267

<style rel = "file.css">

share|improve this question

asked Mar 8 at 23:40

DanbardoDanbardo

267

share|improve this question

asked Mar 8 at 23:40

DanbardoDanbardo

267

asked Mar 8 at 23:40

DanbardoDanbardo

267

asked Mar 8 at 23:40

DanbardoDanbardo

267