Spoofing HTTP-request Referrer from HTML?

Question

Is there some secret and mystical way to change the value of my HTTP-request's referer, or at the very least, keep it from showing? Also, using a MitM page from another domain would not solve my issue, as you are now just submitting that other page's value.

This is not browser specific, I would need to do this on the HTML level.

The problem I am facing is a silent-login page where it sends an HTTP-Redirect to the http-Referrer, unless it is the same domain, or empty.

Answer 1

You can not control this on an html level. Your only option is to modify the login code to not issue the redirect or to direct it to the desired page.