Function same_origin 

fn same_origin(configured: &str, origin: &str) -> bool

true when configured denotes the same origin as origin (already an ASCII origin serialization). Falls back to a string compare for values that aren’t parseable URLs, so a hand-edited config.json still matches.