Presenter: signal must be sent from the same origin unless they have …

…annotation @crossorigin (BC break)

Experimental

src/Application/UI/Component.php

@@ -104,6 +104,14 @@ protected function tryCall(string $method, array $params): bool
	 */
	public function checkRequirements($element): void
	{
		if (
			$element instanceof \ReflectionMethod
			&& substr($element->getName(), 0, 6) === 'handle'
			&& !ComponentReflection::parseAnnotation($element, 'crossOrigin')
			&& !$this->getPresenter()->getHttpRequest()->isSameSite()
		) {
			throw new Nette\Application\ForbiddenRequestException('The signal was not sent from the same domain. It can be allowed using @crossOrigin annotation.');
		}
	}

src/Application/UI/Presenter.php

@@ -298,6 +298,7 @@ protected function shutdown(Application\IResponse $response)
	 */
	public function checkRequirements($element): void
	{
		parent::checkRequirements($element);
		$user = (array) ComponentReflection::parseAnnotation($element, 'User');
		if (in_array('loggedIn', $user, true)) {
			trigger_error(__METHOD__ . '() annotation @User is deprecated', E_USER_DEPRECATED);