There's different scenario's. The one that's the problem is where the portal has an iframe that points to my hy game, on my server.
That has the advantage of saving them bandwidth, and allowing me to make updates easily, however that also allows anybody to also show my content on there site.
Browser.domain only returns where the content is stored, not the site that's showing it.
So no, I can't use that method to allow just a specific portal, and it's really not in their interest to keep people from stealing that content, since it's not their bandwidth.
Browser.referrer gets the site that's showing it, but the information that's returned is not just the domain of the site, but the entire url.
We need exact strings to match, like scirra,com, not , which obviously you couldn't possibly know beforhand.
I might add all that all someone has to do to get my url is search the page source of the portal for "iframe".