Ask HN: How to validate requests with no back end?

I'm a newer programmer who is trying to understand web security.

Say I were to build an IP address lookup API service. I want to make sure that requests come from where they say they do. So I don't want someone to spoof example.com and make a request to my service. Is there a way to do this, without making the real example.com use server side code?

2 points | by doomsdaychicken 2316 days ago

1 comments

  • itamarst 2315 days ago
    There's tools like https://github.com/jakerella/jquery-mockjax - depending on libraries you're using you'll want to use a different one. Basic term is "mock" or "fake". Just be careful to make sure your fake actually matches the real thing.