Add check for Origin & Host headers

[jeremija]

closes #41, closes #43

This commit is an attempt to fix the isuse in NPM security advisory:

https://www.npmjs.com/advisories/726

Further reading:

• https://github.com/webpack/webpack-dev-server/commit/f18e5adf123221a1015be63e1ca2491ca45b8d10
• https://blog.cal1.cn/post/Sniffing%20Codes%20in%20Hot%20Module%20Reloading%20Messages

[Macil]

Thanks!

[jeremija]

Thanks for merging! I noticed you published a new version on NPM, but the advisory still says version 0.4.0 is affected.

Do you happen to know how to change this?

[Macil]

I don't know why it lists 0.4.0 as an affected version. I've messaged npm support about it.

[jeremija]

I sent them an email too yesterday. Looks like they have affected versions hardcoded. This is a part of the output of npm audit --json:

  "vulnerable_versions": "*",
  "patched_versions": "<0.0.0",

[jeremija]

Looks like they fixed it! 👍