Not clear to me that there are any "incoming" connections. If the PI and the browser are on the same local subnet, then after the initial ARP query to determine the local MAC address of the Pi, no traffic goes through the routing function, only through the built-in wifi AP and switch.
If the Pi...