Add origin checks for UI route submissions#14708

Merged

brophdawg11 merged 7 commits intodevfrom

brophdawg11/origin-checks

Jan 6, 2026

Commits on Jan 6, 2026

fix: additional layer of CSRF protection.

jacob-ebey
authored and
brophdawg11
committed
make non optional but configurable

jacob-ebey
authored and
brophdawg11
committed
pass null through to still check when oringinating from a sandboxed

jacob-ebey
authored and
brophdawg11
committed
simplify a bit

jacob-ebey
authored and
brophdawg11
committed
update fixture

jacob-ebey
authored and
brophdawg11
committed
update integration tests

jacob-ebey
authored and
brophdawg11
committed
Update changelog and error message
brophdawg11
committed