fix(forms): accept HIPAA Jotform completion origin

www/tools/service-portal.test.mjs

@@ -11,16 +11,18 @@ import { collectResource, resourceReferences, rewriteResources } from './portal-
 import { isFormACompletion } from '../src/utils/jotform-completion.ts';
 import { portalLinkPresentation } from '../src/utils/portal-presentation.ts';
 
-test('completion envelope requires exact origin, active frame window and string Form A ID', () => {
+test('completion envelope requires an exact approved origin, active frame window and string Form A ID', () => {
   const source = {};
   const check = (event, frame, active) => isFormACompletion(event, frame, active,
     'https://form.jotform.com/262946078314059?formContext=consultation&language=en');
   const data = { action: 'submission-completed', formID: '262946078314059' };
   const event = { origin: 'https://form.jotform.com', source, data };
   assert.equal(check(event, source, true), true);
+  assert.equal(check({ ...event, origin: 'https://hipaa-submit.jotform.com' }, source, true), true);
   assert.equal(check({ ...event, data: JSON.stringify(data) }, source, true), true);
   for (const change of [
-    { origin: 'https://form.jotform.com.evil.invalid' }, { origin: 'null' }, { origin: 'http://form.jotform.com' },
+    { origin: 'https://form.jotform.com.evil.invalid' }, { origin: 'https://hipaa-submit.jotform.com.evil.invalid' },
+    { origin: 'https://other.jotform.com' }, { origin: 'null' }, { origin: 'http://form.jotform.com' },
     { source: {} }, { source: null }, { data: { ...data, formID: 'other' } },
     { data: { ...data, formID: 262946078314059 } }, { data: { ...data, action: 'load' } },
     { data: '{broken' }, { data: [] }, { data: null }, { data: 'x'.repeat(4097) },