1. Xunlei cannot be prevented by referer anti-hotlinking, so you need to use timestamp anti-hotlinking. 2. The essential principle of anti-hotlinking is judged by the referer header information carried by the http request. If it cannot be accessed, it means that the referer header is carried and is not included in the whitelist rules.
![[Web front-end] Node.js quick start](https://img.php.cn/upload/course/000/000/067/662b5d34ba7c0227.png)
1. Xunlei cannot be prevented by referer anti-hotlinking, so you need to use timestamp anti-hotlinking.
2. The essential principle of anti-hotlinking is judged by the referer header information carried by the http request. If it cannot be accessed, it means that the referer header is carried and is not included in the whitelist rules.