I've been trying to identify the origin of a POST request made to a Google Apps Script doPost()
content service;
function doPost(request) {
// Something like this:
var originURL = request.headers.URL; // http://myurl.com
}
Since I have published it ("Deploy as web app"), to 'Anyone, even anonymous', it has the following header:
access-control-allow-origin: *
So I want to control it's access in my code.
Is it possible?