How to prevent request forgery through reverse proxy?
I am currently working on a paid library and am responsible for implementing request filtering. The library restricts requests to only allow those with a valid license key used from a registered domain or localhost. For example, a request from localhost to localhost:8080
is allowed.