Fix: allow Hermes Debugger to connect from Flipper (#1086)

* Fix: allow Hermes Debugger to connect from Flipper

This change reflects D20526486 by @rickhanlonii  at Facebook: when Running Hermes Debugger from inside Flipper, the origin is localhost, but not the metro port. This fixes facebook/flipper#660 (comment)

* Fixed compile errors

* Fix lint error

packages/cli/src/commands/server/middleware/getSecurityHeadersMiddleware.ts

@@ -11,13 +11,10 @@ export default function getSecurityHeadersMiddleware(
   res: http.ServerResponse,
   next: (err?: any) => void,
 ) {
-  // @ts-ignore Property 'client' does not exist on type 'IncomingMessage', verify
-  const address = req.client.server.address();
-
   // Block any cross origin request.
   if (
-    req.headers.origin &&
-    req.headers.origin !== `http://localhost:${address.port}`
+    typeof req.headers.origin === 'string' &&
+    !req.headers.origin.match(/^https?:\/\/localhost:/)
   ) {
     next(
       new Error(