Whether credentials are included in the CORS request.
Set of allowed HTTP headers.
Set of allowed HTTP methods.
Set of allowed origins.
Set of exposed HTTP headers.
Number of seconds that the browser should cache preflight request results.