CorsSimpleResponseHeaders

Default HTTP headers that are always allowed by CORS to be used in a response (simple request headers according to https://www.w3.org/TR/cors/#simple-header).