@glyph HTTP Referrer was a mistake (that we now depend on to prevent XSS attacks and to secure reverse proxies).