add check for origin/referer to reduce likelihood of invalid data submission?

[kewalaka]

unless i'm mistaken, the snippet will accept data from any origin.

I wondered whether having an optional origin/referrer header check might be worthwhile to reduce the likelihood of this being done accidentally? noting this relies on people being good and not spoofing.