Reference: https://fetch.spec.whatwg.org/#cors-safelisted-response-header Differential Revision: https://phabricator.services.mozilla.com/D58492