/// <summary> /// Finds out if the <paramref name="requestOrigin"/> (URI) belongs to current site's administration /// so the request origin can be considered as trusted. /// </summary> /// <param name="requestOrigin">URI of the request origin</param> /// <returns>True, if the requestHeaders origin domain is one of current site's domains</returns> private static bool IsCurrentSiteOrigin(string requestOrigin) { if (requestOrigin == null) { return(false); } string originSiteName = SiteInfoProvider.GetSiteNameFromUrl(requestOrigin); string currentSiteName = SiteContext.CurrentSite.SiteName; return(String.Equals(originSiteName, currentSiteName, StringComparison.InvariantCultureIgnoreCase)); }