
Referer is Flash file in many browsers not the page URL
I have had a long running security problem whereby I want to play restricted content in Amazon S3 based on referer URL. This works ok in Google Chrome and Operas only. When I open the network tab inspecting the page I see the referer URL and permission is granted. However In the other PC browsers the referer URL is the actual flash player file https://ssl.p.jwpcdn.com/6/12/jwplayer.flash.swf
When I add this to the whitelist of URL's I can then play the content. But this means the video can be played on any embeded webpage using the SSL cloud based JW Player. ( not ideal)
How is it that Chrome uses the page URL as referer and IE/Firefox uses the flash player file... is this something that JW has a way around to fix for me