A no-CORS-safelisted request-header name is a header name that is a byte-case-insensitive match for one of
Accept
Accept-Language
Content-Language
Content-Type
To determine whether a header header is a no-CORS-safelisted request-header, run these steps:
1.If header’s name is not a no-CORS-safelisted request-header name, then return false.
2.Return whether header is a CORS-safelisted request-header.
来源:https://fetch.spec.whatwg.org/
研究了许久,猜测可能是跟RequestMode,no-cors有关