CVE-2025-43703: Insecure Referer Based Authcve-2025-43703-insecure-referer-based-auth
Relying on the 'Referer' header to grant access or determine trust context is insecure as it can be spoofed or sent automatically by a browser from malicious sites (e.g., via image src attributes or scripts). Use a strongly generated authorization token or API key instead (such as a Bearer token in the 'Authorization' header).