diff --git a/dev/js/src/plugin/server.js b/dev/js/src/plugin/server.js
index bc4eaaa..daea33c 100644
--- a/dev/js/src/plugin/server.js
+++ b/dev/js/src/plugin/server.js
@@ -395,6 +395,7 @@
     // The handling needs to be very careful,
     // as this can easily become a security nightmare.
     _receiveMsg : function (e) {
+
       // Get event data
       var d = e.data;
 
@@ -404,7 +405,11 @@
         return;
 
       // e.origin is probably set and okay - CHECK!
+      // TODO: Check e.origin is in the list of registered participants
+      // if (e.origin !== "http://example.com:8080")
+      //   return;
 
+      
       // Get origin ID
       var id = d["originID"];