Function allows 

pub(crate) fn allows(origin: Option<&str>, server: &ServerConfig) -> bool

Whether a request’s Origin may open the socket.

A request with none is a native client - the protocol client, a harness, wscat - and browsers never omit the header, so absence is allowed and a present origin is what the gate reads.