Atlassian actually rely on referrer headers as well! Extensions such as smart referrer break their single SSO system.