plone/plone.protect — comment on commit c35239511d5b86129fecf9805178913ceec3700a
File:  line 0
By vangheem:

It only rejects it if the referrer is sent AND it is different. So if it's disabled, it should work fine...