Function normalizeOrigin

apps/server/internal/httpserver/security.go:209–215

(raw string)

}

func normalizeOrigin(raw string) string {
	parsed, err := url.Parse(strings.TrimSpace(raw))
	if err != nil || parsed.Scheme == "" || parsed.Host == "" {
		return ""
	}
	return fmt.Sprintf("%s://%s", strings.ToLower(parsed.Scheme), strings.ToLower(parsed.Host))
}

// peerIsTrustedProxy reports whether the immediate TCP peer (r.RemoteAddr)
// is in the configured ZENNOTES_TRUSTED_PROXIES set. Forwarded-* headers