I have a domain and one page is being accessed by different website. I have tried whitelisting with referrer but am seeing activity from headless browsers.
some website ever i insisted them to add referrer as meta tag but am seeing activity on my page outside my whitelisted domains.
i need much secure way i tried even checking the history page visited but was not successful
How can i stop CROS and allow from certain domains only.