pub(crate) fn cors_allow_origin(origins: &[String]) -> Result<AllowOrigin>
An empty list allows any origin.