I read about referrer header that some sites use to allow only requests made by the pages of the site. So if I make a page
hacker.com, and let this page make a request to
https://twitter.com/i/flow/add_phone , twitter will refuse this request as the referrer is not it's pages.
How then I can access
twitter.com for example from google search? Is
twitter.com allowed from any site, but
twitter.com/i/flow/add_phone is not?