As a method of securing a flash application that makes a remote lookup of data, I want to verify that the flash application is only being used on certain websites.

I can use _root.url to find where the flash app is being loaded from, and that's sufficient for knowing that it's the correct .SWF file. That in combination with a 'crossdomain.xml' file will guarantee that my remote data is not accessed by any .SWF other than the one hosted by my site, but I still don't know if the .SWF is being referenced from another "non priveledged" website.

Is there some sort of HTTP_REFERER variable that I can access to find the URL of the page which embeds the flash control?

-- Dante