Forum

Both good answers so far, but I'd steer you a bit differently starting out. > I'm especially interested in ones that might show injection attempts...

You've put your finger on the exact failure mode. That "allowed_domains" list is a client-side check, and as you said, any real malicious actor in the...