Fetch: tests for safelisting simple range headers from preflight

For whatwg/fetch#1312.

Co-authored-by: Jake Archibald <jaffathecake@gmail.com>

cors/cors-safelisted-request-header.any.js

@@ -40,4 +40,24 @@ function safelist(headers, expectPreflight = false) {
   ["multipart/form-data;\"", true]
 ].forEach(([mimeType, preflight = false]) => {
   safelist({"content-type": mimeType}, preflight);
-})
+});
+
+[
+  ["100-200", true],
+  ["MB=100-200", true],
+  ["bytes=100-200"],
+  ["bytes=100-200hello", true],
+  ["bytes=abc-def", true],
+  ["bytes=100-200,300-400", true],
+  ["bytes=-200", true],
+  ["bytes=200-"],
+  ["bytes=200-100", true],
+  [`bytes=1${'0'.repeat(60)}-2${'0'.repeat(60)}`, true],
+  ["bytes 100-200", true],
+  ["bytes = 100-200", true],
+  ["bytes =100-200", true],
+  [",bytes=100-200", true],
+  ["bytes=,100-200", true],
+].forEach(([value, preflight = false]) => {
+  safelist({"range": value}, preflight);
+});