ServiceWorker

db8b223e - Add check for CORS-safelisted methods and headers to foreign fetch.

Add check for CORS-safelisted methods and headers to foreign fetch. We probably ultimately want to add the extra options to ForeignFetchOptions as discussed in #880, but for now just limiting headers and methods to CORS safelisted values seems reasonable, and matches chrome's implementation.