However, if the originating request is from a HTTPS page, then the referrer will be stripped, so you cannot depend on this security system.
However the referrer will be stripped. This was then. The originating request is from a HTTPS page. You cannot depend on this security system. This is however.