CORS Rule

• Position(integer) : This field is used to order the rules when validating a request. The rules with the lowest position are the most prioritized and the ones with the highest position are the least prioritized.
• Request Origin Pattern(text) : This is a regular expression to validate if the rule applies to the request being made.
  For example, if the request contains a header Origin with a value of http://sample.example.com and this field's value is http://another\.sample\.example\.com, this rule will not be applied to the request.
• Request Path Pattern(text) : This is a regular expression to validate if the rule applies to the request being made.
  For example, if the request contains a path /news/government/ and this field's value is /sports/.*, this rule will not be applied to the request.
• Allowed Methods in the Request(text) : This field serves to inform the HTTP methods supported in the CORS call being handled.
  It can be a comma-separated list of supported values or the value *. For example: GET, PUT, HEAD, OPTIONS or *.
  If this field has a list of values, the HTTP request method must match one of the values in this list for the rule to be applied to the request.
  If this field has a value of *, the HTTP request method being made will not be validated (all methods will be supported).
  This value is passed in the header Access-Control-Allow-Methods in preflight requests.
• Allowed Headers(text) : This field serves to inform the HTTP headers that can be sent during a normal CORS call.
  This value is passed in the header Access-Control-Allow-Headers in preflight requests.
• Allows Credential Sending(boolean) : This field serves to inform the browser if credentials should be exposed to JavaScript.
  This value is passed in the header Access-Control-Allow-Credentials.
• Exposed Headers in the Request(text) : This field serves to inform the HTTP headers that can be exposed to the resource making the CORS call.
  This value is passed in the header Access-Control-Expose-Headers in normal requests.
• Maximum Age of CORS Information Cache(integer) : This field serves to inform the caching time of the CORS information by the client in seconds.
  This value is passed in the header Access-Control-Max-Age in preflight requests.