But origins are not since they are part of security policies and checking for modern browsers. We attempt to read the ancestor origins of the frame, and only read the referrer as a fallback for older browsers.