There is no safe way to prove an AV made a HTTP request in LSL. Any HTTP request in the LSL script can be imitated by an impostor. This function returns a nonce that can be verified in web server script, which is reasonably safe to assume the actual AV made the request.

LSL_String osGetNonce(string service, string action)
service and action can be used to further identify the nonce when read by back-end
single-use short-life

https://github.com/holoneon/opensim/commit/b3668b61ee9ee45...