How to protect widgets from forged requests How to protect widgets from forged requests javascript javascript