Assistant: 
User: 
    Please analyze the following code file and determine whether it belongs to any of the provided modules based on the listed module descriptions.
    Note that the provided list of modules may not be exhaustive, and some files may not belong to any of the modules. 
    If the code belongs to a module, Only output the module name, without any explanation or additional information; otherwise, return 'None' if it does not belong to any module.

    Modules : {
        "UI": "Handles the front-end user interface, consisting of HTML, CSS, and JavaScript files generated by the Angular framework. It processes user requests and interacts with the server using AJAX for data retrieval and client-side interactions."
"Test Driver": "Facilitates automated regression testing and handles transmission of test data in JSON format. It performs Java testing using TestNG and JavaScript unit-testing with Jest. It also sets up a simulated web server for servlet-level tests and automates end-to-end testing using Selenium Java."
"Logic": "Manages the business logic of TEAMMATES, including handling relationships between entities, managing transactions, input value sanitization, access control rights, and interfacing with GAE-provided or third-party APIs."
"Storage": "Performs CRUD operations on data entities, validation of data, and abstraction of GQL queries, hiding the complexities of datastore from the Logic component."
"Common": "Contains utility classes, custom exceptions, and data transfer objects used across the entire application for easy consolidation and transfer of structured data."
"E2E": "Handles end-to-end testing and load & performance testing, providing helpers, abstractions of browser pages, and test cases for E2E tests and L&P tests."
"Client": "Contains scripts for administrative tasks, such as migrating data to a new schema and calculating statistics. This module connects directly to the application back-end for administrative purposes."
    }

    Code: package teammates.ui.servlets; /** * Checks and validates origin of HTTP requests. */ public class OriginCheckFilter implements Filter { private static final Logger log = Logger.getLogger(); private static final String ALLOWED_HTTP_METHODS = String.join(", ", Arrays.asList( HttpGet.METHOD_NAME, HttpPost.METHOD_NAME, HttpPut.METHOD_NAME, HttpDelete.METHOD_NAME, HttpOptions.METHOD_NAME )); private static final String ALLOWED_HEADERS = String.join(", ", Arrays.asList( Const.HeaderNames.CSRF_TOKEN, "Content-Type", Const.HeaderNames.WEB_VERSION, "ngsw-bypass" )); @Override public void init(FilterConfig filterConfig) { // nothing to do } @Override public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain) throws IOException, ServletException { HttpServletRequest request = (HttpServletRequest) req; HttpServletResponse response = (HttpServletResponse) res; if (Config.IS_DEV_SERVER) { response.setHeader("Access-Control-Allow-Origin", Config.APP_FRONTEND_URL); response.setHeader("Access-Control-Allow-Methods", ALLOWED_HTTP_METHODS); response.setHeader("Access-Control-Allow-Headers", ALLOWED_HEADERS); response.setHeader("Access-Control-Allow-Credentials", "true"); } if (Config.CSRF_KEY.equals(request.getHeader(Const.HeaderNames.CSRF_KEY))) { // Can bypass CSRF check with the correct key chain.doFilter(req, res); return; } // The header X-AppEngine-QueueName cannot be spoofed as GAE will strip any user-sent X-AppEngine-QueueName headers. // Reference: https://cloud.google.com/appengine/docs/standard/java/taskqueue/push/creating-handlers#reading_request_headers boolean isRequestFromAppEngineQueue = request.getHeader("X-AppEngine-QueueName") != null; if (isRequestFromAppEngineQueue) { // Requests from App Engine are allowed to bypass CSRF check chain.doFilter(req, res); return; } String referrer = request.getHeader("referer"); if (referrer == null) { // Requests with missing referrer information are given the benefit of the doubt // to accommodate users who choose to disable the HTTP referrer setting in their browser // for privacy reasons } else if (!isHttpReferrerValid(referrer, request.getRequestURL().toString())) { denyAccess("Invalid HTTP referrer.", request, response); return; } switch (request.getMethod()) { case HttpPost.METHOD_NAME: case HttpPut.METHOD_NAME: case HttpDelete.METHOD_NAME: String message = getCsrfTokenErrorIfAny(request); if (message != null) { denyAccess(message, request, response); return; } break; default: break; } chain.doFilter(req, res); } /** * Validates the HTTP referrer against the request URL. * The origin is the base URL of the HTTP referrer, which includes the protocol and authority * (host name + port number if specified). * Similarly, the target is the base URL of the requested action URL. * For the referrer to be considered valid, origin and target must match exactly. * Otherwise, the request is likely to be a CSRF 
Assistant: