Avoid an unnecessary string allocation in allow_cross_origin_request.