Function req

apps/local/src/serve-shared.test.ts:14–15

(headers: Record<string, string>)

const allowed = new Set<string>(DEFAULT_ALLOWED_HOSTS);
const req = (headers: Record<string, string>): Request =>
  new Request("http://127.0.0.1/api/scope", { headers });

describe("isAllowedOrigin", () => {
  it("allows loopback origins on any port", () => {