fn is_cors_safelisted_method(m: &Method) -> bool