plone/plone.protect — comment on commit c35239511d5b86129fecf9805178913ceec3700a
File:  line 0
By iElectric:

I'd say referrer check is redundant since it partly solves what CSRF does.