Hello,
I’ve noticed when copying and sharing links to webreports that the person I send the link to will get the error “Invalid Referrer” when opening the link. I’ve always thought that this was just a limitation in webreports.
Now I’ve created a webreport schedule that sends a report via email, I’ve checked the “Include link to current report” and the email is delivered, everything works fine exept for the link, always “Invalid Referrer”.
Now I’m questioning that links that are sent from webreports should work and the error must be some problem with the setup.
Should this not work?
The behavior is not a Bigfix limitation ( other then does not depends directly from Bigfix, just send a required information ) but is to address the following vulnerability:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0295
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0024250
While Bigfix cannot avoid to send a required information to the reciever, otherwise would be potentially exposed to the ‘cross-site forgery’ vulnerability, the application used to read that mail ( for example Outlook ) is conveniently using that information to block the possibility to click on potentially dangerous links, throwing a ‘Invalid referrer’ error message.
The person have received the mail, once recongnized it is safe, can copy/paste the URL in a browser to make it working … ( among other this demostrate the link sent from Web Reports is valid )