online-requests: add client-side validation