check-referer. Middleware that rejects requests whose referer or origin header does not identify them as having come from a specified domain