pub fn allowed_origins() -> Vec<String>Expand description
Returns the browser origins allowed to send requests to the server: only its own, as it serves no pages that call it.
Requests without an origin don’t come from browsers, so they’re always allowed.