Systems and methods for performing header protection in distributed systems

A system comprising:

• a device comprising one or more processors coupled to memory, the device configured to:
• receive, from a client through a first resource accessed by the client during a session between the client and the device, a request for a second resource that includes an identifier of the session and identifies an address of the first resource;
• determine, using the identifier, that an address of the first resource has been previously accessed by the client during the session;
• verify, using a list generated by the device for the session, whether an address of the second resource is mapped to the address of the first resource for the session between the client and the device, wherein the address of the first resource is different from the address of the second resource;
• and
• determine whether to provide access to the second resource responsive to the address of the first resource being previously accessed by the client during the session and the address of the second resource mapped in the list to the address of the first resource for the session.

A non-transitory computer-readable medium, comprising instructions that, when executed by a processor of a device, cause the processor to:

• receive, from a client through a first resource accessed by the client during a session between the client and the device, a request for a second resource that includes an identifier of the session and identifies an address of the first resource;
• determine, using the identifier, that an address of the first resource has been previously accessed by the client during the session;
• verify, using a list generated by the device for the session, whether an address of the second resource is mapped to the address of the first resource for the session between the client and the device, wherein the address of the first resource is different from the address of the second resource;
• and
• determine whether to provide access to the second resource responsive to the address of the first resource being previously accessed by the client during the session and the address of the second resource mapped in the list to the address of the first resource for the session.