Function same_origin 

pub fn same_origin(
    allowed: AllowedOrigins,
) -> impl Filter<Extract = (), Error = Rejection> + Clone

Refuses every request a browser sent from another origin, whatever its method. Used for the WebSocket handshake, which is a GET.