Constant FETCH_SITE_HEADER 

pub const FETCH_SITE_HEADER: &str = "sec-fetch-site";

What a browser says about who started a request.

A forbidden header name: page script can neither set it nor remove it, so what arrives is the browser’s account rather than the caller’s.