Function is_allowed_origin 

pub(crate) fn is_allowed_origin(origin: &str) -> bool

A loopback origin (is_loopback_origin), or one a headless srv was told to accept with --allowed-origin (a reverse proxy’s public origin). Used by CORS and by ws_origin_guard.