Comment by mic159

Does it have any protection from malicious js on another site (say a bad ad on a news site) connecting to your application?

I have seen some applications like this, but they fail to check the origin header.