Wildcard "*" in Access-Control-Allow-Headers is not supported

[DennisNeuendorfNetlight]

The newest CORS-Standard https://developer.mozilla.org/de/docs/Web/HTTP/Headers/Access-Control-Allow-Headers specifies that a "*" can be used as a wildcard in Access-Control-Allow-Headers.

WKWebView neither support the wildcard not the base values like "content-types" implicitly.