All CORS related headers are prefixed with "Access-Control-".

Access-Control-Allow-Origin
Access-Control-Allow-Credentials
Access-Control-Expose-Headers

References:

https://www.html5rocks.com/en/tutorials/cors/