Policy Definition tab on the Cross Origin Resource Sharing form
On the Policy Definition tab of the Cross Origin Resource Sharing form, you specify credential usage and the list of allowed origins, preflight expiration, allowed request methods, allowed headers, and exposed headers.