Manual:$wgAllowedCorsHeaders

Default value
This was backported to MediaWiki 1.35.11, 1.38.7 and 1.39.4.

This was backported to MediaWiki 1.35.11.