FIX: [security bug] XHR check bypass
Merge pull request #790 from ZogStriP/fix-security-bug-XHR-check-bypass

FIX: [security bug] XHR check bypass