JSON - what http headers are sent from browser to external server json file

Question

Let's imagine the following situation.

I have a website mysearchengine.com and then I use search suggestions from external sites, for example eniro.no:

http://map01.eniro.no/search/search.json?q=de&index=yp_sug&profile=pl&pageSize=10&callback=C

Does eniro.no can see that their JSON is requested from website mysearchengine.com?

My issue is that I want to use some JSON resources of another (not my) server and I wonder if it is seen for them that I'm doing that?

The above is only an example, easiest I found to show my question about how JSON works.

Andrew M · Accepted Answer · 2012-09-08 00:02:01Z

1

Yes, in one of two main ways:

HTTP Referrer Header: http://www.w3.org/Protocols/HTTP/HTRQ_Headers.html#z14

Direct IP address logging: If they log your IP address, they could potentially do a reverse lookup to find your web address. Alternatively, if you are under a shared IP, they may just block your IP address if you are abusing their web resources.

Note: You can choose whether to pass the referrer header or not. It is up to your server. However, there is no way to mask what computer/server requests the remote resource (yes, using a proxy they will be able to tell that the proxy's IP requested the resource, but that is beside the point).

answered Sep 8, 2012 at 0:02

Andrew M

4,29811 gold badges46 silver badges68 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

PrzeoR Over a year ago

take note: I'm talking about implementing external NOT MINE server to mine website, and what headers are seens for external .jsons administratiors. Not about requesting .json file from my own computer, but from thousands users from my website

Anatoly G · Accepted Answer · 2012-10-05 07:29:35Z

0

Are you looking to have a user click a button on your site, and your site will make a GET request, in javascript, to another site, and then put content on your site? That's called Cross Origin Resource Sharing (CORS).

If you're controlling the javascript, you can insert additional headers into the request, and since it's the user's browser that's making the request, the site will only see that user's information, not your site's.

Besides that, the answer by Andrew M. is correct, based on the browser, there will probably be a referred header sent, and I am not sure you can get rid of it through JS.

answered Oct 5, 2012 at 7:29

Anatoly G

4,1522 gold badges23 silver badges23 bronze badges

Collectives™ on Stack Overflow

JSON - what http headers are sent from browser to external server json file

2 Answers 2

1 Comment

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Related