I have a very specific need of allowing access to an unknown set of domains where they all have a common domain as referral.
Put the other way around I have a website including items (js, images, css, etc) from an unknown set of domains which I need to allow access through to.
I know referrals are set client side and can be edited. This is not a concern in this case as the users are already authenticated via credentials and logged.
Is allowing access based on referral possible in Squid?
You can, using the referer acl-type - quoting the manual:
An example configuration that should work: