![](https://secure.gravatar.com/avatar/fc11ae0d14c86c8607fbdca27a6297fc?rating=PG&size=50&default=https%3A%2F%2Fcdn.desk.com%2Fassets%2Funknown_user_50-8ad5644bbe6b1bd7454f2ea465f782bd.png)
Referer is Flash file in many browsers not the page URL
I have had a long running security problem whereby I want to play restricted content in Amazon S3 based on referer URL. This works ok in Google Chrome and Operas only. When I open the network tab inspecting the page I see the referer URL and permission is granted. However In the other PC browsers the referer URL is the actual flash player file https://ssl.p.jwpcdn.com/6/12/jwplayer.flash.swf
When I add this to the whitelist of URL's I can then play the content. But this means the video can be played on any embeded webpage using the SSL cloud based JW Player. ( not ideal)
How is it that Chrome uses the page URL as referer and IE/Firefox uses the flash player file... is this something that JW has a way around to fix for me