pub fn validate_demo_origin(origin: &str) -> Result<(), String>Expand description
Validates the exact browser origin used by a public Demo deployment.
HTTPS is mandatory except for an explicit loopback HTTP origin used by local tests and development. Origins must contain only a scheme and authority: paths, query strings, fragments, credentials, and trailing slashes are rejected.