[CORS] Safe-list the range header from cors preflights.

The Fetch standard now safelists 'simple' range headers from
preflight checks. (whatwg/fetch#1312)

This CL also successfully runs against the new WPT suite
(web-platform-tests/wpt#31058)

I2S: https://groups.google.com/a/chromium.org/g/blink-dev/c/0f1zQ4hjoyQ

Bug: 1255711

Change-Id: I06ee27fec586950b7d45e3cba416df1b5090fa4d
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3190330
Reviewed-by: Reilly Grant <reillyg@chromium.org>
Commit-Queue: Rayan Kanso <rayankans@chromium.org>
Cr-Commit-Position: refs/heads/main@{#930108}
NOKEYCHECK=True
GitOrigin-RevId: 7b4dbc8d73cd09187b1501931141871f9d90b30d