CorsSimpleRequestHeaders

Default HTTP headers that are always allowed by CORS (simple request headers according to https://www.w3.org/TR/cors/#simple-header). Note that Content-Type header simplicity depends on its value.