Make sure pre-flight checks the incoming origin against the whitelist.

Thanks @Acubed