feat: Security CSRF Fix, Logout optimierung, Footer Anpassung, Rechtstexteanpassung

src/app/api/business-inquiry/route.ts

@@ -3,8 +3,14 @@ import { prisma } from "@/lib/prisma";
 import { businessInquirySchema } from "@/lib/validation";
 import { rateLimit, getClientIp } from "@/lib/rate-limit";
 import { verifyTurnstileToken } from "@/lib/turnstile";
+import { isTrustedOrigin } from "@/lib/csrf";
 
 export async function POST(request: Request) {
+  // Route-Handler haben keinen eingebauten CSRF-Schutz — siehe lib/csrf.ts.
+  if (!isTrustedOrigin(request)) {
+    return NextResponse.json({ error: "Ungültige Anfrage." }, { status: 403 });
+  }
+
   const ip = await getClientIp();
   if (!rateLimit(`business-inquiry:${ip}`, 5, 60 * 60 * 1000)) {
     return NextResponse.json(