pub fn get_cors_unsafe_header_names(headers: &HeaderMap) -> Vec<HeaderName>
https://fetch.spec.whatwg.org/#cors-unsafe-request-header-names