Function ensure_request_source_allowed 

pub fn ensure_request_source_allowed(
    headers: &HeaderMap,
    policy: &RequestSourcePolicy,
) -> Result<()>

Checks request source headers against explicit trusted scheme/host and public origins. Opaque non-UTF8 headers are invalid, including in optional mode.

Errors

Returns a classified error for malformed, missing or untrusted source values.