isAcrossStream attack check