validateHeaderProtection validates cross-origin requests using Go 1.25's CrossOriginProtection Returns nil if header validation passes or is disabled, error if validation fails
(r *http.Request)
source not stored for this graph (policy: none)