It was a somewhat common “security” feature to check referer, especially in the days before you could rely on CSP.