You could make sure that the requesting page is on your domain.