fn browser_allowed(headers: &HeaderMap, config: &Config) -> bool
Whether a request comes from a page of this server or an allowed origin, by a name of this server; a request without an Origin is not from a browser page.
Origin