30791_fix

@@ -74,6 +74,11 @@ const max_tokens = process.env.MAX_TOKENS_chatbot_plus ? parseInt(process.env.MA
 
 
 // Primary Open AI Route
 // Primary Open AI Route
 app.post('/api', async (req, res) => {
 app.post('/api', async (req, res) => {
+  if(!req.get('host').includes(req.get('origin'))) {
+    res.status(401);
+    res.send('Method Not Allowed');
+    return;
+  }
   const { message, currentModel, temperature } = req.body;
   const { message, currentModel, temperature } = req.body;
 
 
   if (currentModel == "gpt-3.5-turbo" || currentModel == "gpt-3.5-turbo-0301") {
   if (currentModel == "gpt-3.5-turbo" || currentModel == "gpt-3.5-turbo-0301") {