That's correct. As I say, the Referer isn't a complete solution.