allowedHeaders
Specifies which headers are allowed in a preflight OPTIONS
request through the Access-Control-Request-Headers
header. Each header name that is specified in Access-Control-Request-Headers
must have a corresponding entry in the rule. Only the headers that were requested are sent back.
This element can contain only one wildcard character (*).