Companion

The default CORS max age value.

Default HTTP methods that are always allowed by CORS.

The allowed set of content types that are allowed by CORS without preflight check.

Default HTTP headers that are always allowed by CORS (simple request headers according to https://www.w3.org/TR/cors/#simple-header). Note that Content-Type header simplicity depends on its value.

Default HTTP headers that are always allowed by CORS to be used in a response (simple request headers according to https://www.w3.org/TR/cors/#simple-header).