Bug 916935 - Add Access-Control-Allow-Headers to REST API to indicate which HTTP headers can be used when making the request
r/a=glob