I want to block the view of the images and video in web and mobile app. For the web, I have managed access with WAF and added the API server as a trusted domain. But in the Mobile App, the header referral is empty and unable to match the WAF trusted domain policy. Anyone can suggest what is better to way to protect the Mobile content since the WAF not working for mobile requests.
What you want to do is called the DRM Problem, and it can't be solved. No matter what measures you take, I can always circumvent them.
- If you create an image and want to display it on my screen, I can copy it.
- If you create an audio track and want it to play on my speakers, I can copy it.
As soon as I have access to it, I can copy it.