fix: reject cross-site requests to open-editor and invalidate endpoints#5691

bjohansebas merged 2 commits into

mainwebpack/webpack-dev-server:mainfrom

protect-routeswebpack/webpack-dev-server:protect-routesCopy head branch name to clipboard