Authorize a devtools request and return a denial response when blocked.
Browser requests that carry an Origin header must be same-origin. Without
an app-owned authorize callback, requests stay hidden unless the app
deliberately opts into loopback-only unauthenticated development access.
Authorize a devtools request and return a denial response when blocked. Browser requests that carry an Origin header must be same-origin. Without an app-owned
authorizecallback, requests stay hidden unless the app deliberately opts into loopback-only unauthenticated development access.