He checks the Referer header[1]. In Firefox you can prevent that header from being sent by setting `network.http.sendRefererHeader` to 0 (in about:config).

[1]: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Re...