developer-professional video for you're managing an application employing an HTTP Cloud Function to process user activity from both desktop browser and mobile
You're managing an application employing an HTTP Cloud Function to process user activity from both desktop browser and mobile application clients. This function serves as the endpoint for all metric submissions using HTTP POST. However, due to legacy constraints, the function must be linked to a domain separate from the one requested by users on web or mobile sessions. The Cloud Function's domain is https://fn.example.com, while desktop and mobile clients use https://www.example.com. To restrict metric submissions solely to browser and mobile sessions, which response header should you include?