Confluence accepts form submissions from any source. This means if you are logged in to confluence and another site submits data to the confluence instance, then its accepted without question (because the user is already logged in - or automatically logged in).

We need a way to validate the form submission.