I’m attempting to validate the referrer for certain requests in my Rails application. I expect there to be cross-origin requests, but I want to limit which origins are valid – including on redirects if possible.