Don't pessimistically check the user gave us CODEREF