属性

widthCredentials：

  • 跨站点访问控制
  • 响应中cookies忽视的标示

响应头
Access-Control-Allow-Credentials：true
Access-Control-Allow-Origin： 域名
Access-Control-Allow-Headers：DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Allow-Methods：GET, POST, OPTIONS

请求头
Access-Control-Request-Headers：x-requested-with
Access-Control-Request-Method：
Sec-Fetch-Dest：empty
Sec-Fetch-Mode：cors
Sec-Fetch-Site：same-site