Mirror of demo-host.lanebooker.ca — same widget embed snippet — except this origin is intentionally NOT on any tenant's allowed_origins. The HMAC handshake MUST fail here.
demo-host.lanebooker.ca
allowed_origins