added origin checks to execAction